diff --git a/lib/login.js b/lib/login.js
index bb2ed2a6..a48e626e 100644
--- a/lib/login.js
+++ b/lib/login.js
@@ -123,6 +123,7 @@ function run() {
             const kubeconfigPath = path.join(runnerTempDirectory, `kubeconfig_${Date.now()}`);
             core.debug(`Writing kubeconfig contents to ${kubeconfigPath}`);
             fs.writeFileSync(kubeconfigPath, kubeconfig);
+            fs.chmodSync(kubeconfigPath, '600');
             command_1.issueCommand('set-env', { name: 'KUBECONFIG' }, kubeconfigPath);
             console.log('KUBECONFIG environment variable is set');
             yield setContext(kubeconfigPath);
diff --git a/src/login.ts b/src/login.ts
index ae05d726..b8a242dd 100644
--- a/src/login.ts
+++ b/src/login.ts
@@ -119,6 +119,7 @@ async function run() {
         const kubeconfigPath = path.join(runnerTempDirectory, `kubeconfig_${Date.now()}`);
         core.debug(`Writing kubeconfig contents to ${kubeconfigPath}`);
         fs.writeFileSync(kubeconfigPath, kubeconfig);
+        fs.chmodSync(kubeconfigPath, '600');
         issueCommand('set-env', { name: 'KUBECONFIG' }, kubeconfigPath);
         console.log('KUBECONFIG environment variable is set');
         await setContext(kubeconfigPath);