diff --git a/.github/labeler.yml b/.github/labeler.yml
new file mode 100644
index 0000000..9b3dd5c
--- /dev/null
+++ b/.github/labeler.yml
@@ -0,0 +1,4 @@
+# add changes-hitl label if any hitl scripts are changed
+# REVIEW those changes before approving HITL deployment!
+changes-hitl:
+  - any: [hitl/*]
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
new file mode 100644
index 0000000..82b4e70
--- /dev/null
+++ b/.github/workflows/labeler.yml
@@ -0,0 +1,12 @@
+name: "Pull Request Labeler"
+on:
+  pull_request_target:
+    branches: [master]
+
+jobs:
+  labeler:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/labeler@v3
+        with:
+          repo-token: "${{ secrets.GITHUB_TOKEN }}"