diff --git a/.github/workflows/linux_pr_labeler.yml b/.github/workflows/linux_pr_labeler.yml
index 057208ed..4751f700 100644
--- a/.github/workflows/linux_pr_labeler.yml
+++ b/.github/workflows/linux_pr_labeler.yml
@@ -1,4 +1,6 @@
 name: "Pull Request Labeler"
+permissions: read-all
+
 on:
 - pull_request_target