diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index d5c870d45a..d3d92c30be 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -1,16 +1,18 @@
 name: PR Labeler
 
+# on:
+#   push:
+#     branches:
+#       - master
+#   pull_request_target:
 on:
-  push:
-    branches:
-      - master
-  pull_request_target:
-
-permissions:
-  pull-requests: write
+- pull_request_target
 
 jobs:
   Label:
+    permissions:
+      contents: read
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: Check for conflicting PRs