From 793f3ee9198f3f3b3702ced1e7c6ac27107e73c4 Mon Sep 17 00:00:00 2001
From: Andreas Fritzler <andreas.fritzler@sap.com>
Date: Tue, 12 Dec 2023 16:42:17 +0100
Subject: [PATCH] Update release drafter and size workflow (#434)

---
 .github/workflows/release-drafter.yml |  9 +++++++--
 .github/workflows/size-label.yml      | 10 ++++++++--
 2 files changed, 15 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index c1977281..db53f607 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -4,17 +4,22 @@ on:
   push:
     branches:
       - main
-  pull_request_target:
+  pull_request:
     types: [ opened, reopened, synchronize ]
 
 jobs:
   update_release_draft:
+    permissions:
+      # write permission is required to create a github release
+      contents: write
+      # write permission is required for autolabeler
+      # otherwise, read permission is required at least
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       # Drafts your next Release notes as Pull Requests are merged into "main"
       - uses: release-drafter/release-drafter@v5
         with:
-          disable-releaser: github.ref != 'refs/heads/main'
           config-name: release-drafter.yml
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/size-label.yml b/.github/workflows/size-label.yml
index d845e389..069c1adc 100644
--- a/.github/workflows/size-label.yml
+++ b/.github/workflows/size-label.yml
@@ -1,11 +1,17 @@
 name: Size Label
 
 on:
-  pull_request_target:
-    types: [ assigned, opened, synchronize, reopened ]
+  pull_request:
+    types:
+      - opened
+      - edited
+      - synchronize
 
 jobs:
   size-label:
+    permissions:
+      contents: read
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: size-label