diff --git a/Dockerfile b/Dockerfile
index 4c091de..ceeca26 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 FROM gcr.io/distroless/static:nonroot
 
 WORKDIR /
-COPY bin/vault-webhook-linux-amd64 vault-webhook
+COPY --chmod=755 bin/vault-webhook-linux-amd64 vault-webhook
 USER nonroot:nonroot
 
 ENTRYPOINT ["/vault-webhook"]