| name: "PR Labeler" | 
 |  | 
 | on: | 
 |   pull_request_target: | 
 |     types: ["opened", "reopened", "ready_for_review"] | 
 |  | 
 | permissions: | 
 |   contents: read | 
 |  | 
 | jobs: | 
 |   triage: | 
 |     permissions: | 
 |       contents: read | 
 |       pull-requests: write | 
 |     runs-on: ubuntu-latest | 
 |     steps: | 
 |     - name: Harden Runner | 
 |       uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | 
 |       with: | 
 |         egress-policy: audit | 
 |  | 
 |     - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0 | 
 |     if: ${{ github.event.pull_request.draft == false && github.event.pull_request.user.login != 'bazel-io' }} |