feat: read the commits with the token of the workflow AND fix: fail when the commits cannot be retrieved AND fix: read every page of the commits of a pull request

README.md

@@ -31,6 +31,19 @@ After the action completes, the `SEMVER_LEVEL` environment variable is set accor
 
  * `revert` and `WIP` are classified as NONE because the level of semantic versioning change cannot be decided from the commit message alone.
 
+### Token
+
+The commits of a pull request are read through the GitHub API, and the request carries the
+token of the workflow by default, so nothing has to be configured:
+
+|Name|Type|Description|
+|---|---|---|
+|`token`|input|The token used to read the commits of a pull request (default `${{ github.token }}`)|
+
+Setting it to an empty string reads them anonymously, which GitHub limits to 60 requests per
+hour per IP address, shared with every other job running on that address, and which cannot
+read a private repository at all. The action warns when it does.
+
 ### Usage
 Latest version: `v1.1.0`
 

action.yml

@@ -1,5 +1,15 @@
 name: "Flowing Code Commit Message Guidelines"
 description: "Ensures that all commit messages are following the Flowing Code Commit Message Guidelines."
+inputs:
+  token:
+    description: >
+      The token used to read the commits of a pull request. It defaults to the token of
+      the workflow, which raises the limit from the 60 requests per hour that GitHub
+      allows an unauthenticated caller, counted per IP address and therefore shared with
+      every other job running on the same address. Set it to an empty string to read the
+      commits anonymously.
+    required: false
+    default: ${{ github.token }}
 runs:
   using: node20
   main: dist/main/index.js