diff --git a/dagger/store.go b/dagger/store.go
index 96f1bbbb..3847d362 100644
--- a/dagger/store.go
+++ b/dagger/store.go
@@ -103,7 +103,7 @@ func (s *Store) syncDeployment(r *DeploymentState) error {
 		return err
 	}
 
-	if err := os.WriteFile(p, data, 0644); err != nil {
+	if err := os.WriteFile(p, data, 0600); err != nil {
 		return err
 	}