diff --git a/.github/release-drafter.yml b/.github/release-drafter.yml
deleted file mode 100644
index 0d0b1c9..0000000
--- a/.github/release-drafter.yml
+++ /dev/null
@@ -1 +0,0 @@
-_extends: .github
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 7755837..3bcb08b 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -1,10 +1,15 @@
-name: PR Autolabeler
+name: PR Auto-labeler
 
 on:
-  # pull_request event is required for autolabeler
+  # pull_request event is required for auto-labeler
   pull_request:
     types: [opened, reopened, synchronize]
 
+permissions: {}
+
 jobs:
   draft-release:
-    uses: cpp-linter/.github/.github/workflows/release-drafter.yml@main
+    permissions:
+      contents: read
+      pull-requests: write
+    uses: cpp-linter/.github/.github/workflows/pr-labeler.yml@main
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 2250d38..c1dd3ae 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -6,6 +6,11 @@ on:
       - "main"
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   draft-release:
+    permissions:
+      contents: write
+      pull-requests: read
     uses: cpp-linter/.github/.github/workflows/release-drafter.yml@main