diff --git a/.github/workflows/TagBot.yml b/.github/workflows/TagBot.yml
index 392032d..1ef217c 100644
--- a/.github/workflows/TagBot.yml
+++ b/.github/workflows/TagBot.yml
@@ -1,3 +1,8 @@
+# This GitHub action checks whether a new version of this package
+# has been registred in the official registry.
+# If so, it creates a new _release_:
+# https://github.com/JuliaPluto/PlutoSliderServer.jl/releases
+
 name: TagBot
 
 on:
@@ -5,15 +10,29 @@ on:
     types:
       - created
   workflow_dispatch:
-  schedule:
-    - cron: '0 * * * *'
+    inputs:
+      lookback:
+        default: 3
+
+permissions:
+  actions: read
+  checks: read
+  contents: write
+  deployments: read
+  issues: read
+  discussions: read
+  packages: read
+  pages: read
+  pull-requests: read
+  repository-projects: read
+  security-events: read
+  statuses: read
 
 jobs:
-    TagBot:
-        if: github.event_name == 'workflow_dispatch' || github.event_name == 'schedule' || github.actor == 'JuliaTagBot'
-        runs-on: [ubuntu-latest]
-        steps:
-            - uses: JuliaRegistries/TagBot@v1
-              with:
-                  token: ${{ secrets.GITHUB_TOKEN }}
-                  lookback: 30
+  TagBot:
+    if: github.event_name == 'workflow_dispatch' || github.actor == 'JuliaTagBot'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: JuliaRegistries/TagBot@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}