diff --git a/ee/lib/remote_development/workspace_operations/reconcile/reconcile_constants.rb b/ee/lib/remote_development/workspace_operations/reconcile/reconcile_constants.rb
index bd31907166842bb8d369e4e7ee6dc927a8ec3125..7e8c9925b137ee0af68e4fec90a0e3e95f689e0d 100644
--- a/ee/lib/remote_development/workspace_operations/reconcile/reconcile_constants.rb
+++ b/ee/lib/remote_development/workspace_operations/reconcile/reconcile_constants.rb
@@ -15,7 +15,7 @@ module ReconcileConstants
         # Please keep alphabetized
         RUN_AS_USER = 5001
         RUN_POSTSTART_COMMANDS_SCRIPT_NAME = "gl-run-poststart-commands.sh"
-        WORKSPACE_SCRIPTS_VOLUME_DEFAULT_MODE = 0o774
+        WORKSPACE_SCRIPTS_VOLUME_DEFAULT_MODE = 0o555
         WORKSPACE_SCRIPTS_VOLUME_NAME = "gl-workspace-scripts"
         WORKSPACE_SCRIPTS_VOLUME_PATH = "/workspace-scripts"
       end
diff --git a/ee/spec/lib/remote_development/workspace_operations/reconcile/output/desired_config_generator_golden_master_spec.rb b/ee/spec/lib/remote_development/workspace_operations/reconcile/output/desired_config_generator_golden_master_spec.rb
index 880ea53cf7e3aea8a81a1afc6df5da80e2fdd4c0..cb3a90391bd846596fb9b59ceb44044276ff488c 100644
--- a/ee/spec/lib/remote_development/workspace_operations/reconcile/output/desired_config_generator_golden_master_spec.rb
+++ b/ee/spec/lib/remote_development/workspace_operations/reconcile/output/desired_config_generator_golden_master_spec.rb
@@ -596,7 +596,7 @@ def golden_master_desired_config_with_include_all_resources_true
                   {
                     name: "gl-workspace-scripts",
                     projected: {
-                      defaultMode: 0o774,
+                      defaultMode: 0o555,
                       sources: [
                         {
                           configMap: {
@@ -1170,7 +1170,7 @@ def golden_master_desired_config_with_include_all_resources_false
                   {
                     name: "gl-workspace-scripts",
                     projected: {
-                      defaultMode: 0o774,
+                      defaultMode: 0o555,
                       sources: [
                         {
                           configMap: {