| name: "PR Labeler" | 
 |  | 
 | on: | 
 |   pull_request_target: | 
 |     types: ["opened", "reopened", "ready_for_review"] | 
 |  | 
 | permissions: | 
 |   contents: read | 
 |  | 
 | jobs: | 
 |   triage: | 
 |     permissions: | 
 |       contents: read | 
 |       pull-requests: write | 
 |     runs-on: ubuntu-latest | 
 |     steps: | 
 |     - name: Harden Runner | 
 |       uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 | 
 |       with: | 
 |         egress-policy: audit | 
 |  | 
 |     - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1 | 
 |     if: ${{ github.event.pull_request.draft == false && github.event.pull_request.user.login != 'bazel-io' }} |