Add permission for pr-label github actions (#22481)

* Add permission for pr-label github actions

* Add permission for pr-label github actions

* Add permission for pr-label github actions

* Add permission for pr-label github actions

Author: wyunchi-ms

.github/workflows/pr-labeled.yml

@@ -4,12 +4,15 @@ env:
   GH_TOKEN: ${{ github.token }}
   PR: ${{ github.event.pull_request.html_url }}
 on:
-  pull_request:
+  pull_request_target:
     types:
       - labeled
 jobs:
   process_labels:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: read
     steps:
     - uses: actions/checkout@v3
       with:

.github/workflows/script/PrLabeled.ps1

@@ -60,6 +60,11 @@ if ($CommentDict.ContainsKey($LabelName)) {
         Write-Host "Comment is already added"
     }
     else {
-        gh pr comment $PrUrl --body $comment
+        try {
+            gh pr comment $PrUrl --body $comment
+        }
+        catch {
+            Write-Host "Failed to add comment: $_"
+        }
     }
 }