Revert and re-add permissions (#135)

Apparently CodeQL is unhappy

Author: sethvargo

.github/workflows/draft-release.yml

@@ -16,6 +16,9 @@ on:
 jobs:
   draft-release:
     uses: 'google-github-actions/.github/.github/workflows/draft-release.yml@v3' # ratchet:exclude
+    permissions:
+      contents: 'read'
+      pull-requests: 'write'
     with:
       version_strategy: '${{ github.event.inputs.version_strategy }}'
     secrets:

.github/workflows/release.yml

@@ -6,11 +6,19 @@ on:
       - 'main'
       - 'release/**/*'
 
+defaults:
+  run:
+    shell: 'bash'
+
 jobs:
   release:
     uses: 'google-github-actions/.github/.github/workflows/release.yml@v3' # ratchet:exclude
     secrets:
       ACTIONS_BOT_TOKEN: '${{ secrets.ACTIONS_BOT_TOKEN }}'
+    permissions:
+      attestations: 'write'
+      contents: 'write'
+      packages: 'write'
 
   publish:
     needs: