diff --git a/.github/workflows/pr-risk.yml b/.github/workflows/pr-risk.yml
index 8912bf774..13f5a1b3c 100644
--- a/.github/workflows/pr-risk.yml
+++ b/.github/workflows/pr-risk.yml
@@ -7,6 +7,7 @@ on:
 permissions:
   contents: read
   pull-requests: read
+  issues: write
 
 concurrency:
   group: pr-risk-${{ github.event.pull_request.number }}
@@ -26,6 +27,7 @@ jobs:
           pr-number: ${{ github.event.pull_request.number }}
           result-path: risk-pr-result.json
           skip-reviews: "true"
+          apply-label: "true"
 
       - name: Upload risk result
         uses: actions/upload-artifact@v4