CI: release-drafter configuration: permissions, skip-changelog label (#3631)

Author: mmetc

.github/release-drafter.yml

@@ -23,6 +23,8 @@ categories:
       - 'kind/dependencies'
       - 'kind/chore'
 tag-template: "- $TITLE @$AUTHOR (#$NUMBER)"
+exclude-labels:
+  - 'skip-changelog'
 template: |
   ## Changes
 
@@ -31,8 +33,8 @@ template: |
   ## Geolite2 notice
 
   This product includes GeoLite2 data created by MaxMind, available from <a href="https://www.maxmind.com">https://www.maxmind.com</a>.
-  
+
   ## Installation
 
   Take a look at the [installation instructions](https://doc.crowdsec.net/docs/getting_started/install_crowdsec).
-  
+

.github/workflows/ci_release-drafter.yml

@@ -4,18 +4,24 @@ on:
   push:
     # branches to consider in the event; optional, defaults to all
     branches:
+      - main
       - master
       - releases/**
 
+permissions:
+  contents: read
+
 jobs:
   update_release_draft:
+    permissions:
+      contents: write
+      pull-requests: read
     runs-on: ubuntu-latest
     steps:
       # Drafts your next Release notes as Pull Requests are merged into "master"
       - uses: release-drafter/release-drafter@v6
         with:
-          config-name: release-drafter.yml
           # (Optional) specify config name to use, relative to .github/. Default: release-drafter.yml
-          # config-name: my-config.yml
+          config-name: release-drafter.yml
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}