gh-action: fix security scan and labeler syntax (#3746)

follow up on #3740

Signed-off-by: Mustafa Abdelrahman <[email protected]>

Author: MustafaSaber

.github/labeler.yml

@@ -1,6 +1,8 @@
 # Add 'docs' to any changes within 'docs' folder or any subfolders
 documentation:
-  - docs/**/*
+- changed-files:
+  - any-glob-to-any-file:
+    - 'docs/**/*'
 
 # Add 'enhancement' label to any PR where the head branch name starts with `feature/` in the name
 enhancement:

.github/workflows/labeler.yaml

@@ -2,12 +2,14 @@ name: "Pull Request Labeler"
 on:
 - pull_request_target
 
+permissions: {}
+
 jobs:
   labeler:
     permissions:
       contents: read
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/labeler@v6
+    - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1