|  | name: "PR Labeler" | 
|  |  | 
|  | on: | 
|  | pull_request_target: | 
|  | types: ["opened", "reopened", "ready_for_review"] | 
|  |  | 
|  | permissions: | 
|  | contents: read | 
|  |  | 
|  | jobs: | 
|  | triage: | 
|  | permissions: | 
|  | contents: read | 
|  | pull-requests: write | 
|  | runs-on: ubuntu-latest | 
|  | steps: | 
|  | - name: Harden Runner | 
|  | uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 | 
|  | with: | 
|  | egress-policy: audit | 
|  |  | 
|  | - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1 | 
|  | if: ${{ github.event.pull_request.draft == false && github.event.pull_request.user.login != 'bazel-io' }} |