diff --git a/src/taskgraph/docker.py b/src/taskgraph/docker.py
index 17db732e9..f9565e306 100644
--- a/src/taskgraph/docker.py
+++ b/src/taskgraph/docker.py
@@ -346,6 +346,7 @@ def load_task(task_id, remove=True, user=None):
 
         if task_command:
             initfile = tempfile.NamedTemporaryFile("w+", delete=False)
+            os.fchmod(initfile.fileno(), 0o644)
             initfile.write(
                 dedent(
                     f"""