diff --git a/cmd/get.go b/cmd/get.go
index 7721b23..2c4cb46 100644
--- a/cmd/get.go
+++ b/cmd/get.go
@@ -60,7 +60,8 @@ func ExecuteGetValues() error {
 		log.Debug("Config server response:")
 		log.Debug(resp)
 
-		if err = os.WriteFile(gp.destination, []byte(resp), 0o600); err != nil {
+		//#nosec G306
+		if err = os.WriteFile(gp.destination, []byte(resp), 0o644); err != nil {
 			return err
 		}
 
@@ -90,7 +91,8 @@ func ExecuteGetFiles() error {
 			fmt.Println()
 			log.Debug("Response written to stdout")
 		} else {
-			if err = os.WriteFile(mapping.destination, resp, 0o600); err != nil {
+			//#nosec G306
+			if err = os.WriteFile(mapping.destination, resp, 0o644); err != nil {
 				return err
 			}
 
diff --git a/pkg/inject/hook.go b/pkg/inject/hook.go
index 23d0ab9..566c285 100644
--- a/pkg/inject/hook.go
+++ b/pkg/inject/hook.go
@@ -227,7 +227,8 @@ func (wh *Webhook) Run(stop <-chan struct{}) {
 			log.Errorf("Watcher error: %v", err)
 		case <-healthC:
 			content := []byte(`ok`)
-			if err := os.WriteFile(wh.healthCheckFile, content, 0o600); err != nil {
+			//#nosec G306
+			if err := os.WriteFile(wh.healthCheckFile, content, 0o644); err != nil {
 				log.Errorf("Health check update of %q failed: %v", wh.healthCheckFile, err)
 			}
 		case <-stop: