diff --git a/.github/labeler.yml b/.github/labeler.yml
index 9eb6dcc33b4..a40586e3fb6 100644
--- a/.github/labeler.yml
+++ b/.github/labeler.yml
@@ -1,6 +1,5 @@
-documentation:
+documentation1:
 - changed-files:
   - any-glob-to-any-file:
     - 'doc/*'
-    - 'cloudinit/config/schema/*'
 - base-branch: 'main'
diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml
index 71171438900..02f0445eced 100644
--- a/.github/workflows/labeler.yaml
+++ b/.github/workflows/labeler.yaml
@@ -1,9 +1,12 @@
 name: "Pull Request Labeler"
 on:
-- pull_request_target
+- pull_request
 
 jobs:
   labeler:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
     - uses: actions/labeler@v5