diff --git a/.github/labeler.yml b/.github/labeler.yml
new file mode 100644
index 00000000..ccb706fc
--- /dev/null
+++ b/.github/labeler.yml
@@ -0,0 +1,43 @@
+# Configuration for actions/labeler
+# Labels PRs based on changed files
+
+# Proposal labels
+wasi-cli:
+  - changed-files:
+      - any-glob-to-any-file: 'proposals/cli/**'
+
+wasi-clocks:
+  - changed-files:
+      - any-glob-to-any-file: 'proposals/clocks/**'
+
+wasi-filesystem:
+  - changed-files:
+      - any-glob-to-any-file: 'proposals/filesystem/**'
+
+wasi-http:
+  - changed-files:
+      - any-glob-to-any-file: 'proposals/http/**'
+
+wasi-io:
+  - changed-files:
+      - any-glob-to-any-file: 'proposals/io/**'
+
+wasi-random:
+  - changed-files:
+      - any-glob-to-any-file: 'proposals/random/**'
+
+wasi-sockets:
+  - changed-files:
+      - any-glob-to-any-file: 'proposals/sockets/**'
+
+# GitHub Actions label
+github_actions:
+  - changed-files:
+      - any-glob-to-any-file: '.github/**'
+
+# Dependencies label (already exists, used by dependabot)
+dependencies:
+  - changed-files:
+      - any-glob-to-any-file:
+          - '**/deps.toml'
+          - '**/deps.lock'
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
new file mode 100644
index 00000000..51b0a558
--- /dev/null
+++ b/.github/workflows/labeler.yml
@@ -0,0 +1,15 @@
+name: Labeler
+
+on:
+  pull_request_target:
+
+jobs:
+  labeler:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+
+    steps:
+      - name: Apply labels
+        uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1