diff --git a/.github/labeler.yml b/.github/labeler.yml
index 9e246562..c61504f7 100644
--- a/.github/labeler.yml
+++ b/.github/labeler.yml
@@ -1,19 +1,25 @@
 # See .github/workflow/label_pull_requests.yml
 
 'p: google_fonts':
-  - packages/google_fonts/**/*
+- changed-files:
+  - any-glob-to-any-file: packages/google_fonts/**
 
 'p: dynamic_color':
-  - packages/dynamic_color/**/*
+- changed-files:
+  - any-glob-to-any-file: packages/dynamic_color/**
 
 'p: adaptive_breakpoints':
-  - packages/adaptive_breakpoints/**/*
+- changed-files:
+  - any-glob-to-any-file: packages/adaptive_breakpoints/**
 
 'p: adaptive_navigation':
-  - packages/adaptive_navigation/**/*
+- changed-files:
+  - any-glob-to-any-file: packages/adaptive_navigation/**
 
 'p: adaptive_components':
-  - packages/adaptive_components/**/*
+- changed-files:
+  - any-glob-to-any-file: packages/adaptive_components/**
 
 'p: symbols':
-  - packages/symbols/**/*
+- changed-files:
+  - any-glob-to-any-file: packages/symbols/**
diff --git a/.github/workflows/label_pull_requests.yml b/.github/workflows/label_pull_requests.yml
index 855cf6e4..82ebf47a 100644
--- a/.github/workflows/label_pull_requests.yml
+++ b/.github/workflows/label_pull_requests.yml
@@ -8,15 +8,12 @@
 name: Label pull request
 
 on:
-  pull_request_target:
-    types: [opened]
-
-# Declare default permissions as read only.
-permissions: read-all
+- pull_request
 
 jobs:
   label:
     permissions:
+      contents: read
       pull-requests: write
     runs-on: ubuntu-latest
     steps: