diff --git a/.github/workflows/auto_label_prs.yaml b/.github/workflows/auto_label_prs.yaml
index f4b36c8392ac..4970a659dc20 100644
--- a/.github/workflows/auto_label_prs.yaml
+++ b/.github/workflows/auto_label_prs.yaml
@@ -4,6 +4,7 @@
 
 name: 'Auto label PRs'
 on:
+  # zizmor: ignore[dangerous-triggers] - {necessary to mutate the PR}
   pull_request_target:
     types: [opened, ready_for_review]