Add required permissions to PR Labeler (see https://github.com/TimonV…

…S/pr-labeler-action?tab=readme-ov-file#usage ) (#1264)

.github/workflows/pr-labeler.yml

@@ -2,13 +2,21 @@ name: PR Labeler
 on:
   pull_request:
     types: [opened]
+  pull_request_target:
+    types: [opened]
+
+permissions:
+  contents: read
 
 jobs:
   pr-labeler:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read # for TimonVS/pr-labeler-action to read config file
+      pull-requests: write # for TimonVS/pr-labeler-action to add labels in PR
     steps:
       - uses: TimonVS/[email protected]
         with:
           configuration-path: .github/pr-labeler-config.yml
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}