diff --git a/.github/workflows/label-commenter.yml b/.github/workflows/label-commenter.yml
index 2e9e34d..1e3e420 100644
--- a/.github/workflows/label-commenter.yml
+++ b/.github/workflows/label-commenter.yml
@@ -2,19 +2,20 @@ name: Label Commenter
 
 on:
   issues:
-    types:
-      - labeled
-      - unlabeled
+    types: [labeled, unlabeled]
   pull_request_target:
-    types:
-      - labeled
-      - unlabeled
+    types: [labeled, unlabeled]
+
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
 
 jobs:
   comment:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
       - name: Label Commenter
         uses: peaceiris/actions-label-commenter@v1
         with: