From 87f2c58e327891bb655631ed2c68a551c007e968 Mon Sep 17 00:00:00 2001
From: jenkins <brad@bstein.dev>
Date: Tue, 18 Aug 2026 22:35:18 -0300
Subject: [PATCH] ci(hermes-agent-image): keep image file modes world-readable

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 ci/Jenkinsfile.hermes-agent-image | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ci/Jenkinsfile.hermes-agent-image b/ci/Jenkinsfile.hermes-agent-image
index c07114db..2adc096e 100644
--- a/ci/Jenkinsfile.hermes-agent-image
+++ b/ci/Jenkinsfile.hermes-agent-image
@@ -208,6 +208,7 @@ spec:
               /busybox/printf '{"auths":{"registry.bstein.dev":{"auth":"%s"}}}\n' "${auth}" > "${config_path}"
               unset HARBOR_USER HARBOR_PASSWORD auth
               trap '/busybox/rm -f "${config_path}"' EXIT HUP INT TERM
+              umask 022
               /kaniko/executor \
                 --registry-mirror=harbor-core.harbor.svc.cluster.local \
                 --insecure-registry=harbor-core.harbor.svc.cluster.local \