Add: update work-jar.yml to include permissions and check for existing tags before creating a new tag

Author: Sandro642

.github/workflows/work-jar.yml

@@ -3,6 +3,12 @@ on:
   push:
     branches:
       - main
+
+permissions:
+  contents: write
+  pages: write
+  id-token: write
+
 jobs:
   publish-jar:
     runs-on: ubuntu-latest
@@ -11,6 +17,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
+          fetch-depth: 0
 
       - name: Set up JDK 17
         uses: actions/setup-java@v4
@@ -28,6 +35,17 @@ jobs:
           echo "version=$VERSION" >> $GITHUB_OUTPUT
           echo "Extracted version: $VERSION"
 
+      - name: Check if tag already exists
+        id: check_tag
+        run: |
+          if git tag -l "${{ steps.extract_version.outputs.version }}" | grep -q "${{ steps.extract_version.outputs.version }}"; then
+            echo "tag_exists=true" >> $GITHUB_OUTPUT
+            echo "Tag ${{ steps.extract_version.outputs.version }} already exists"
+          else
+            echo "tag_exists=false" >> $GITHUB_OUTPUT
+            echo "Tag ${{ steps.extract_version.outputs.version }} does not exist"
+          fi
+
       - name: Publish Maven artifacts to local repo
         run: ./gradlew publish
         env:
@@ -44,14 +62,11 @@ jobs:
           folder: build/repo
           target-folder: connectorapi/jar
 
-      - name: Configure Git for tagging
+      - name: Create and push Git tag
+        if: steps.check_tag.outputs.tag_exists == 'false'
         run: |
           git config --local user.email "action@github.com"
           git config --local user.name "GitHub Action"
-          git remote set-url origin https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}.git
-
-      - name: Create and push Git tag
-        run: |
           git tag -a "${{ steps.extract_version.outputs.version }}" -m "Release version ${{ steps.extract_version.outputs.version }}"
           git push origin "${{ steps.extract_version.outputs.version }}"
         env: