publish content write with tag

Author: marwie

.github/workflows/publish.yml

@@ -9,7 +9,7 @@ jobs:
         runs-on: ubuntu-latest
         timeout-minutes: 5
         permissions:
-          contents: read
+          contents: write
           id-token: write
         steps:
           - uses: actions/checkout@v4

src/publish.js

@@ -449,8 +449,13 @@ export async function publish(args) {
                 }
                 else {
                     logger.error(`❌ Failed to create git tag: ${res.error}`);
+                    const errorStr = res.error?.toString() || res.output?.toString() || '';
+                    let errorMsg = `❌ **Failed to create git tag** \`${tagName}\`:`;
+                    if (errorStr.includes('Permission') || errorStr.includes('denied') || errorStr.includes('403')) {
+                        errorMsg += `\n⚠️ Add \`contents: write\` permission to your workflow`;
+                    }
                     if (webhook) {
-                        await sendMessageToWebhookWithCodeblock(webhook, `❌ **Failed to create git tag** \`${tagName}\`:`, res.error, { logger });
+                        await sendMessageToWebhookWithCodeblock(webhook, errorMsg, res.error, { logger });
                     }
                 }
             }