diff --git a/.github/workflows/TagBot.yml b/.github/workflows/TagBot.yml
index 199c92b..4bad0ec 100644
--- a/.github/workflows/TagBot.yml
+++ b/.github/workflows/TagBot.yml
@@ -8,7 +8,7 @@ on:
       lookback:
         default: "3"
 permissions:
-  actions: write
+  actions: read
   checks: read
   contents: write
   deployments: read