change artifact scope to public-read
diff --git a/buildkite/bazelci.py b/buildkite/bazelci.py
index 9573ad7..1644b7d 100644
--- a/buildkite/bazelci.py
+++ b/buildkite/bazelci.py
@@ -634,7 +634,7 @@
try:
tmpdir = tempfile.mkdtemp()
bazel_binary_path = download_bazel_binary(tmpdir, platform)
- fail_if_nonzero(execute_command(["gsutil", "cp", bazel_binary_path,
+ fail_if_nonzero(execute_command(["gsutil", "cp", "-a", "public-read", bazel_binary_path,
bazelci_builds_upload_url(platform, build_number)]))
info = {
@@ -648,7 +648,7 @@
json.dump(info, fp)
fp.close()
exitcode = execute_command(["gsutil", "-h", "x-goog-if-generation-match:" + expected_generation,
- "cp", fp.name, bazelci_builds_metadata_url(platform)])
+ "cp", "-a", "public-read", fp.name, bazelci_builds_metadata_url(platform)])
os.unlink(fp.name)
return exitcode == 0
finally: