name: labeler
on:
  pull_request:

# All three permission grants are load-bearing: reusable-workflow permissions can
# only be downgraded from the caller, so omitting one (e.g. issues:write) either
# fails to create labels or triggers a silent startup_failure. `pull_request`
# (NOT pull_request_target) is correct — the org takes no fork PRs.
permissions:
  contents: read
  pull-requests: write
  issues: write

jobs:
  label:
    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4