diff --git a/.github/workflows/pr-labels.yml b/.github/workflows/pr-labels.yml
index 51fb6afe74..593d5802e1 100644
--- a/.github/workflows/pr-labels.yml
+++ b/.github/workflows/pr-labels.yml
@@ -6,7 +6,11 @@ on:
   pull_request_review:
     types: [submitted, edited, dismissed]
 
-permissions: write-all
+permissions:
+  checks: write
+  contents: read
+  pull-requests: write
+  issues: write
 
 jobs:
   update-labels:
@@ -18,7 +22,10 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
             const { owner, repo } = context.repo;
-            const pr_number = context.payload.pull_request.number;
+            // 根据事件类型获取 PR number
+            const pr_number = context.payload.pull_request
+              ? context.payload.pull_request.number
+              : context.payload.review.pull_request_number;
 
             // 获取 PR 的所有 reviews
             const reviews = await github.rest.pulls.listReviews({
@@ -60,4 +67,4 @@ jobs:
               repo,
               issue_number: pr_number,
               labels: [newLabel]
-            });
\ No newline at end of file
+            });