diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
index 23956a0..0127be6 100644
--- a/.github/workflows/label.yml
+++ b/.github/workflows/label.yml
@@ -4,8 +4,11 @@ on:
 
 jobs:
   triage:
+    permissions:
+      contents: read
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/labeler@main
+    - uses: actions/labeler@v5
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"