diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index a4f53cec6..c83073f4b 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -2,7 +2,8 @@
 
 name: Labeler
 
-on:
+# This is for labeling, permissions are restricted.
+on: # zizmor: ignore[dangerous-triggers]
   pull_request_target:
     types: [opened, synchronize, reopened]