diff --git a/.github/workflows/cherry-pick.yml b/.github/workflows/cherry-pick.yml
index 5cf6d9cf..0f229953 100644
--- a/.github/workflows/cherry-pick.yml
+++ b/.github/workflows/cherry-pick.yml
@@ -1,15 +1,18 @@
 name: Cherry pick PR to release-1.0 branch
 
 on:
-  pull_request_target:
+  pull_request:
     branches:
       - main
+    types: ["closed", "labeled"]
+
+permissions: write-all
 
 jobs:
   cherry_pick_release_1_0:
     runs-on: ubuntu-latest
     name: Cherry pick PR to release-1.0 branch
-    if: ${{ contains(github.event.pull_request.labels.*.name, 'cherry-pick-release-1.0') && github.event.pull_request.merged == true }}
+    if: ${{ contains(github.event.pull_request.labels.*.name, 'cherry-pick-release-1.0') }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4