diff --git a/yaml/transform/command.go b/yaml/transform/command.go
index fc9ce020..cf4892f0 100644
--- a/yaml/transform/command.go
+++ b/yaml/transform/command.go
@@ -65,6 +65,7 @@ machine $DRONE_NETRC_MACHINE
 login $DRONE_NETRC_USERNAME
 password $DRONE_NETRC_PASSWORD
 EOF
+chmod 0600 $HOME/.netrc
 fi
 
 unset DRONE_NETRC_USERNAME