Add environment variable support and change fail_on_rejection default to true

- Add VERSIONER_API_KEY and VERSIONER_API_URL environment variable fallback support
- Change fail_on_rejection default from false to true for safer deployment guardrails
- Update README with environment variable usage example showing all 4 event types
- Update action.yml and inputs.ts to reflect new defaults and env var support

Author: paustin01

README.md

@@ -77,15 +77,17 @@ Check the **Actions** tab to see your deployment tracked!
 
 | Input | Required | Default | Description |
 |-------|----------|---------|-------------|
-| `api_url` | ❌ | `https://api.versioner.io` | Versioner API endpoint (override for testing or self-hosted) |
-| `api_key` | ✅ | - | Versioner API key (store in GitHub Secrets) |
+| `api_url` | ❌ | `https://api.versioner.io` | Versioner API endpoint (can also use `VERSIONER_API_URL` env var) |
+| `api_key` | ✅* | - | Versioner API key (can also use `VERSIONER_API_KEY` env var, store in GitHub Secrets) |
 | `product_name` | ❌ | repo name | Name of the product/service (defaults to repository name) |
 | `version` | ✅ | - | Version identifier (e.g., git SHA, semantic version, build number) |
 | `environment` | ❌ | - | Target environment (required for deployment events, optional for build events) |
 | `event_type` | ❌ | `deployment` | Event type: `build` or `deployment` |
 | `status` | ❌ | `success` | Event status (`success`, `failure`, `in_progress`) |
 | `metadata` | ❌ | `{}` | Additional JSON metadata to attach to the event |
-| `fail_on_rejection` | ❌ | `false` | Fail the workflow if Versioner rejects the deployment (e.g., conflicts, no-deploy windows) |
+| `fail_on_rejection` | ❌ | `true` | Fail the workflow if Versioner rejects the deployment (e.g., conflicts, no-deploy windows) |
+
+\* Required unless provided via `VERSIONER_API_KEY` environment variable
 
 ## 📤 Outputs
 
@@ -99,6 +101,53 @@ Check the **Actions** tab to see your deployment tracked!
 
 ## 🔧 Usage Examples
 
+### Using Environment Variables (Recommended for Multiple Events)
+
+Set `VERSIONER_API_KEY` once at the job or workflow level to avoid repeating it:
+
+```yaml
+env:
+  VERSIONER_API_KEY: ${{ secrets.VERSIONER_API_KEY }}
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Build start
+        uses: versioner-io/versioner-github-action@v1
+        with:
+          version: ${{ github.sha }}
+          event_type: build
+          status: in_progress
+
+      - name: Build application
+        run: npm run build
+
+      - name: Build complete
+        uses: versioner-io/versioner-github-action@v1
+        with:
+          version: ${{ github.sha }}
+          event_type: build
+          status: success
+
+      - name: Deploy start
+        uses: versioner-io/versioner-github-action@v1
+        with:
+          version: ${{ github.sha }}
+          environment: production
+          status: in_progress
+
+      - name: Deploy application
+        run: ./deploy.sh production
+
+      - name: Deploy complete
+        uses: versioner-io/versioner-github-action@v1
+        with:
+          version: ${{ github.sha }}
+          environment: production
+          status: success
+```
+
 ### Track a Build (No Deployment)
 
 ```yaml
@@ -107,8 +156,7 @@ Check the **Actions** tab to see your deployment tracked!
   with:
     api_key: ${{ secrets.VERSIONER_API_KEY }}
     version: ${{ github.sha }}
-    event_type: build
-    # No environment needed - just tracking the build!
+    event_type: build   # No environment needed - just tracking the build!
 ```
 
 ### Track a Deployment

action.yml

@@ -8,12 +8,13 @@ branding:
 
 inputs:
   api_url:
-    description: 'Versioner API endpoint URL (defaults to https://api.versioner.io)'
+    description: 'Versioner API endpoint URL (can also use VERSIONER_API_URL env var, defaults to https://api.versioner.io)'
     required: false
-    default: 'https://api.versioner.io'
+    default: ''
   api_key:
-    description: 'Versioner API key (store in GitHub Secrets)'
-    required: true
+    description: 'Versioner API key (can also use VERSIONER_API_KEY env var, store in GitHub Secrets)'
+    required: false
+    default: ''
   product_name:
     description: 'Name of the product/service (defaults to repository name if not provided)'
     required: false
@@ -40,7 +41,7 @@ inputs:
   fail_on_rejection:
     description: 'Fail the workflow if Versioner rejects the deployment (e.g., conflicts, no-deploy windows)'
     required: false
-    default: 'false'
+    default: 'true'
 
 outputs:
   deployment_id:

src/inputs.ts

@@ -5,15 +5,20 @@ import { ActionInputs } from './types'
  * Get and validate action inputs
  */
 export function getInputs(): ActionInputs {
-  const apiUrl = core.getInput('api_url', { required: true })
-  const apiKey = core.getInput('api_key', { required: true })
+  const apiUrl = core.getInput('api_url', { required: false }) || process.env.VERSIONER_API_URL || 'https://api.versioner.io'
+  const apiKey = core.getInput('api_key', { required: false }) || process.env.VERSIONER_API_KEY || ''
   const productName = core.getInput('product_name', { required: false }) || ''
   const version = core.getInput('version', { required: true })
   const environment = core.getInput('environment', { required: false }) || ''
   const eventType = core.getInput('event_type', { required: false }) || 'deployment'
   const status = core.getInput('status', { required: false }) || 'success'
   const metadataInput = core.getInput('metadata', { required: false }) || '{}'
-  const failOnRejectionInput = core.getInput('fail_on_rejection', { required: false }) || 'false'
+  const failOnRejectionInput = core.getInput('fail_on_rejection', { required: false }) || 'true'
+
+  // Validate API key is provided
+  if (!apiKey) {
+    throw new Error(`api_key is required (provide via input or VERSIONER_API_KEY environment variable)`)
+  }
 
   // Validate API URL format
   if (!apiUrl.startsWith('http://') && !apiUrl.startsWith('https://')) {