diff --git a/.github/workflows/label-enforcer.yml b/.github/workflows/label-enforcer.yml
index 8975e0d220..5b5812dffe 100644
--- a/.github/workflows/label-enforcer.yml
+++ b/.github/workflows/label-enforcer.yml
@@ -10,7 +10,7 @@ jobs:
   enforce-label:
     # Run this job only when restricted labels are changed
     if: |-
-      ${{ (github.event.label.name == 'help wanted' || github.event.label.name == 'status/need-triage') &&
+      ${{ (github.event.label.name == 'help wanted' || github.event.label.name == 'status/need-triage' || github.event.label.name == '🔒 maintainer only') &&
           (github.repository == 'google-gemini/gemini-cli' || github.repository == 'google-gemini/maintainers-gemini-cli') }}
     runs-on: 'ubuntu-latest'
     permissions: