diff --git a/.github/labeler.yaml b/.github/labeler.yaml
index ecb5f1b..9cc891b 100644
--- a/.github/labeler.yaml
+++ b/.github/labeler.yaml
@@ -1,9 +1,20 @@
 # Modules
 ":floppy_disk: cloudwatch-log-group":
-- modules/cloudwatch-log-group/**/*
+- changed-files:
+  - any-glob-to-any-file:
+    - modules/cloudwatch-log-group/**/*
+
 ":floppy_disk: cloudwatch-log-policy":
-- modules/cloudwatch-log-policy/**/*
+- changed-files:
+  - any-glob-to-any-file:
+    - modules/cloudwatch-log-policy/**/*
+
 ":floppy_disk: cloudwatch-oam-link":
-- modules/cloudwatch-oam-link/**/*
+- changed-files:
+  - any-glob-to-any-file:
+    - modules/cloudwatch-oam-link/**/*
+
 ":floppy_disk: cloudwatch-oam-sink":
-- modules/cloudwatch-oam-sink/**/*
+- changed-files:
+  - any-glob-to-any-file:
+    - modules/cloudwatch-oam-sink/**/*
diff --git a/.github/workflows/pull-request-labeler.yaml b/.github/workflows/pull-request-labeler.yaml
index d5ac851..aac2537 100644
--- a/.github/workflows/pull-request-labeler.yaml
+++ b/.github/workflows/pull-request-labeler.yaml
@@ -7,12 +7,17 @@ jobs:
   label-pr:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+      pull-requests: write
+
     steps:
     - name: Add Labels for PR
       uses: actions/labeler@v5
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         configuration-path: .github/labeler.yaml
+        dot: true
         sync-labels: true
 
     - name: Add PR Size Labels for PR