diff --git a/crates/cuddle-ci/src/rust_service/ssh_agent.rs b/crates/cuddle-ci/src/rust_service/ssh_agent.rs
index 141cc0f..accdda9 100644
--- a/crates/cuddle-ci/src/rust_service/ssh_agent.rs
+++ b/crates/cuddle-ci/src/rust_service/ssh_agent.rs
@@ -35,10 +35,12 @@ impl DaggerMiddleware for SshAgent {
                     .contents(
                         r#"
 Host *
-   StrictHostKeyChecking no
-   UserKnownHostsFile=/dev/null
+  UserKnownHostsFile=/dev/null
+  StrictHostKeyChecking no
+
                 "#,
                     )
+                    .permissions(0700)
                     .build()?,
             )
             .with_unix_socket(&sock_var, socket)