diff --git a/.github/workflows/labeler-train.yml b/.github/workflows/labeler-train.yml
index 53791a7f258..2acfe17fe9c 100644
--- a/.github/workflows/labeler-train.yml
+++ b/.github/workflows/labeler-train.yml
@@ -45,6 +45,11 @@ on:
         required: true
         default: "staging"
 
+permissions:
+  issues: read
+  pull-requests: read
+  actions: write
+
 jobs:
   # Without specifying a pageSize of 1 for downloading pull requests, the requests time out
   # Directly invoking the individual workflows until https://github.com/dotnet/issue-labeler/issues/97 is addressed
@@ -68,10 +73,6 @@ jobs:
   #     threshold: 0.40
 
   build-predictor:
-    permissions:
-      issues: read
-      pull-requests: read
-      actions: write
     uses: dotnet/issue-labeler/.github/workflows/build-predictor.yml@f0c098669828a134c0313adf3f58c1909e555d86 # v1.0.1
 
   labeler-download-issues:
@@ -111,11 +112,11 @@ jobs:
     permissions:
       pull-requests: read
       actions: write
-    uses: dotnet/issue-labeler/.github/workflows/download-pulls.yml@main
+    uses: dotnet/issue-labeler/.github/workflows/download-pulls.yml@f0c098669828a134c0313adf3f58c1909e555d86 # v1.0.1
     with:
       data_cache_key: ${{ inputs.cache_key_suffix }}
       pull_limit: ${{ inputs.data_limit && fromJSON(inputs.data_limit) || 0 }}
-      page_size: ${{ inputs.pull_page_size }}
+      page_size: ${{ inputs.pull_page_size && fromJSON(inputs.pull_page_size) || 1 }}
       label_prefix: "area-"
 
   labeler-train-pulls: