fix: permissions for PR labeler GH action workflow

Signed-off-by: Vladislav Doster <[email protected]>

.github/labeler.yml

@@ -1,16 +1,11 @@
-# Add 'zinit` label to any change in a zinit file
-zinit:
-- zinit*.zsh
-# Add 'scripts` label to any change in scripts/ directory
-scripts:
-- scripts/*
-# Add 'docs` label to any change in doc/ directory
-docs:
-- docs/*
-- doc/**/*
-# Add 'tests` label to any change in tests/ directory
-tests:
-- tests/*
-ci/cd:
-- .github/*
-- .github/**/*
+ci/cd: ['.github/**/*']
+
+docs: ['docker/*']
+
+docs: ['doc/**/*']
+
+scripts: ['scripts/*']
+
+tests: ['tests/**/*', '.zunit.yml']
+
+zinit: ['zinit*.zsh', '_zinit']

.github/workflows/labeler.yml → .github/workflows/labeler.yaml

@@ -1,18 +1,21 @@
-# This workflow will triage pull requests and apply a label based on the
-# paths that are modified in the pull request.
+# This workflow will triage pull requests and apply a label based on the paths
+# that are modified in the pull request.
 
 name: Labeler
-on: [pull_request]
+
+on: [pull_request_target]
 
 jobs:
   label-pull-requests:
 
-    runs-on: ubuntu-latest
     permissions:
       contents: read
       pull-requests: write
 
+    runs-on: ubuntu-latest
+
     steps:
     - uses: actions/labeler@v4
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
+        sync-labels: true