diff --git a/internal/kms/vault_sa.go b/internal/kms/vault_sa.go
index bdeea0f56..d777c40a2 100644
--- a/internal/kms/vault_sa.go
+++ b/internal/kms/vault_sa.go
@@ -320,7 +320,7 @@ func (kms *VaultTenantSA) getTokenPath() (string, error) {
 		return "", err
 	}
 
-	err = os.WriteFile(dir+"/token", []byte(token), 0600)
+	err = os.WriteFile(dir+"/token", []byte(token), 0o600)
 	if err != nil {
 		return "", fmt.Errorf("failed to write token for ServiceAccount %s/%s: %w", kms.tenantSAName, kms.Tenant, err)
 	}
diff --git a/internal/rbd/rbd_util.go b/internal/rbd/rbd_util.go
index aa40e1d88..4f999fe82 100644
--- a/internal/rbd/rbd_util.go
+++ b/internal/rbd/rbd_util.go
@@ -1672,7 +1672,7 @@ func updateRBDImageMetadataStash(metaDataPath, device string) error {
 	}
 
 	fPath := filepath.Join(metaDataPath, stashFileName)
-	err = os.WriteFile(fPath, encodedBytes, 0600)
+	err = os.WriteFile(fPath, encodedBytes, 0o600)
 	if err != nil {
 		return fmt.Errorf("failed to stash JSON image metadata at path: (%s) for spec:(%s) : %w",
 			fPath, imgMeta.String(), err)