diff --git a/.github/workflows/build-tag.yaml b/.github/workflows/build-tag.yaml
index de291bab..1ea7cc6d 100644
--- a/.github/workflows/build-tag.yaml
+++ b/.github/workflows/build-tag.yaml
@@ -105,3 +105,19 @@ jobs:
     # under `dapr/ext/<name>/` claimed by both distributions, and `pip
     # uninstall <legacy>` would delete files that core dapr now provides.
     # See RELEASE.md and the runtime warning in dapr/__init__.py.
+
+  # Opens (or comments on) a tracking issue when a tagged release fails
+  # anywhere in the lint -> build -> publish chain.
+  notify-on-failure:
+    needs: [lint, build, publish]
+    if: failure() && startsWith(github.ref, 'refs/tags/v')
+    permissions:
+      issues: write
+      actions: read
+    uses: dapr/.github/.github/workflows/open-issue-on-failure.yml@main
+    with:
+      title: "Release publish failed: ${{ github.workflow }} (${{ github.ref_name }})"
+      labels: "release,ci/publish-failure"
+      mention: "@dapr/maintainers-python-sdk @dapr/approvers-python-sdk"
+    secrets:
+      dapr_bot_token: ${{ secrets.DAPR_BOT_TOKEN }}