diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
index 4de2203647f..fe5bbdbe9d6 100644
--- a/.github/workflows/label.yml
+++ b/.github/workflows/label.yml
@@ -2,19 +2,18 @@ name: Add/Remove Labels
 
 on:
   pull_request_target:
-    types: [ opened ]
+    types: [opened]
     
 jobs:
   add_new_contributor_label:
     if: github.event.action == 'opened'
-    permissions:
-      contents: read
-      pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v6
-        with:
-          script: |
+    - name: Add new contributor label
+      uses: actions/github-script@v6
+      with:
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+        script: |
             const creator = context.payload.sender.login;
             const opts = github.rest.issues.listForRepo.endpoint.merge({
               ...context.issue,
@@ -37,10 +36,11 @@ jobs:
             }
             
             if (!isAlreadyContributor) {
+              console.log('Adding label: new contributor');
               await github.rest.issues.addLabels({
                 issue_number: context.issue.number,
                 owner: context.repo.owner,
                 repo: context.repo.repo,
                 labels: ['new contributor'],
               });
-            }
+            }