diff --git a/buildkite/bazelci.py b/buildkite/bazelci.py
index 9573ad7..1644b7d 100644
--- a/buildkite/bazelci.py
+++ b/buildkite/bazelci.py
@@ -634,7 +634,7 @@
   try:
     tmpdir = tempfile.mkdtemp()
     bazel_binary_path = download_bazel_binary(tmpdir, platform)
-    fail_if_nonzero(execute_command(["gsutil", "cp", bazel_binary_path,
+    fail_if_nonzero(execute_command(["gsutil", "cp", "-a", "public-read", bazel_binary_path,
                                      bazelci_builds_upload_url(platform, build_number)]))
 
     info = {
@@ -648,7 +648,7 @@
     json.dump(info, fp)
     fp.close()
     exitcode = execute_command(["gsutil", "-h", "x-goog-if-generation-match:" + expected_generation,
-                                "cp", fp.name, bazelci_builds_metadata_url(platform)])
+                                "cp", "-a", "public-read", fp.name, bazelci_builds_metadata_url(platform)])
     os.unlink(fp.name)
     return exitcode == 0
   finally: