diff --git a/.woodpecker/release.yaml b/.woodpecker/release.yaml
index d07b896..e37208e 100644
--- a/.woodpecker/release.yaml
+++ b/.woodpecker/release.yaml
@@ -17,8 +17,8 @@ steps:
       - echo 1
       - echo $GIT_SIGN_PUB
       - echo 2
-      - echo $GIT_SIGN_KEY > /run/secrets/sign
-      - echo $GIT_SIGN_PUB > /run/secrets/sign.pub
+      - install -b -m 400 <(echo "$GIT_SIGN_KEY") /run/secrets/sign
+      - install -b -m 444 <(echo "$GIT_SIGN_PUB") /run/secrets/sign.pub
       - echo 3
       - cat /run/secrets/sign.pub
       - echo 4