diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index 9f9b653..34fbe54 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -20,7 +20,7 @@ jobs:
           mkdir ~/.ssh
           command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )
           eval $(ssh-agent -s)
-          echo "${{ secrets.C3LF_SSH_TESTING }}" > ~/.ssh/id_ed25519
+          echo "${{ secrets.C3LF_SSH_TESTING }}" > ~/.ssh/id_ed25519 && chmod 0600 ~/.ssh/id_ed25519
           ssh-add ~/.ssh/id_ed25519
           ssh-add -L
           echo "andromeda.lab.or.it ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDXPoO0PE+B9PYwbGaLo98zhbmjAkp6eBtVeZe43v/+T" >> ~/.ssh/known_hosts