From 8f8c56c04e20c41bff9a3973dd429ff536432100 Mon Sep 17 00:00:00 2001
From: Elveg <mondrunov.ev@genlab.llc>
Date: Thu, 16 Jul 2026 16:56:23 +0300
Subject: [PATCH] fix permissions-linter and kics

---
 roles/grafana_alloy/tasks/install.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/roles/grafana_alloy/tasks/install.yml b/roles/grafana_alloy/tasks/install.yml
index 48a0fa5..14c8c8d 100644
--- a/roles/grafana_alloy/tasks/install.yml
+++ b/roles/grafana_alloy/tasks/install.yml
@@ -59,6 +59,8 @@
       ansible.builtin.unarchive:
         src: "/tmp/alloy-linux-amd64.zip"
         dest: "/tmp"
+        group: "alloy"
+        owner: "alloy"
         remote_src: true
 
     - name: "Install | Put the binary under the PATH"
@@ -87,4 +89,4 @@
     dest: /etc/systemd/system/alloy.service
     owner: "root"
     group: "root"
-    mode: "0644"
+    mode: "0600"