diff --git a/.github/labeler.yml b/.github/labeler.yml
index 25e0e9f..49b038b 100644
--- a/.github/labeler.yml
+++ b/.github/labeler.yml
@@ -1,4 +1,6 @@
 'pr':
-- src/**/*
+- changed-files:
+  - any-glob-to-any-file: src/**
 'ci':
-- .github/**/*
+- changed-files:
+  - any-glob-to-any-file: .github/**
diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
index b70f5bf..9bab6a7 100644
--- a/.github/workflows/label.yml
+++ b/.github/workflows/label.yml
@@ -9,6 +9,9 @@ jobs:
   triage:
     runs-on: ubuntu-latest
     if: github.repository_owner == 'labcatr'
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
     - uses: actions/labeler@v4
       with: