diff --git a/.github/workflows/labels-from-yml.yml b/.github/workflows/labels-from-yml.yml
index b8412642e7..859c45f17f 100644
--- a/.github/workflows/labels-from-yml.yml
+++ b/.github/workflows/labels-from-yml.yml
@@ -12,6 +12,10 @@ on:
 
 jobs:
   labeler:
+    permissions:
+      contents: read  # for actions/labeler to determine modified files
+      pull-requests: write  # for actions/labeler to add labels to PRs
+      issues: write # for actions/labeler to add labels to issues
     if: ${{ github.repository_owner == 'Armbian' }}
     runs-on: ubuntu-latest
     steps: