diff --git a/.github/workflows/multi-labeler.yml b/.github/workflows/multi-labeler.yml
index 1bf3a5e2..d09255cf 100644
--- a/.github/workflows/multi-labeler.yml
+++ b/.github/workflows/multi-labeler.yml
@@ -11,6 +11,14 @@ on:
     types: [opened, edited, synchronize, ready_for_review]
     branches: [master, main]
 
+permissions:
+  # Setting up permissions in the workflow to limit the scope of what it can do. Optional!
+  contents: read # the config file
+  issues: write # for labeling issues (on: issues)
+  pull-requests: write # for labeling pull requests (on: pull_request_target or on: pull_request)
+  statuses: write # to generate status
+  checks: write # to generate status
+
 jobs:
   labeler:
     name: Multi Labeler