diff --git a/.github/workflows/TagBot.yml b/.github/workflows/TagBot.yml
index e269f79..77a1d23 100644
--- a/.github/workflows/TagBot.yml
+++ b/.github/workflows/TagBot.yml
@@ -6,19 +6,33 @@
 name: TagBot
 
 on:
-  issue_comment:
-    types:
-      - created
-  workflow_dispatch:
-  schedule:
-    - cron: '0 * * * *'
+    issue_comment:
+        types:
+            - created
+    workflow_dispatch:
+        inputs:
+            lookback:
+                default: 3
+
+permissions:
+    actions: read
+    checks: read
+    contents: write
+    deployments: read
+    issues: read
+    discussions: read
+    packages: read
+    pages: read
+    pull-requests: read
+    repository-projects: read
+    security-events: read
+    statuses: read
 
 jobs:
     TagBot:
-        if: github.event_name == 'workflow_dispatch' || github.event_name == 'schedule' || github.actor == 'JuliaTagBot'
-        runs-on: [ubuntu-latest]
+        if: github.event_name == 'workflow_dispatch' || github.actor == 'JuliaTagBot'
+        runs-on: ubuntu-latest
         steps:
             - uses: JuliaRegistries/TagBot@v1
               with:
                   token: ${{ secrets.GITHUB_TOKEN }}
-                  lookback: 30