fix: Add permission for workflow

.github/workflows/publish.yml

@@ -1,5 +1,8 @@
 name: Build and Publish
 
+permissions:
+  contents: write
+
 on:
   push:
     tags:
@@ -12,11 +15,14 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          ref: 'main'
       - uses: actions/setup-node@v4
         with:
           node-version: 16
           cache: 'npm'
           cache-dependency-path: package-lock.json
+      - run: npm install -D
       - run: npm run package
       - run: |
           git config user.name github-actions