diff --git a/.docker/Dockerfile b/.docker/Dockerfile
index 6593ed298..6a1b2bea9 100644
--- a/.docker/Dockerfile
+++ b/.docker/Dockerfile
@@ -1,5 +1,5 @@
 # build environment
-FROM node:14.17.0 as build
+FROM node:20.2.0 as build
 WORKDIR /app
 COPY . /app
 RUN yarn install
diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
index 14c831562..218dc5c3a 100644
--- a/.github/workflows/label.yml
+++ b/.github/workflows/label.yml
@@ -10,6 +10,10 @@ on: [pull_request]
 
 jobs:
   label:
+    permissions:
+      checks: write
+      contents: read
+      pull-requests: write
     runs-on: ubuntu-latest
 
     steps: