diff --git a/scripts/publish-deb b/scripts/publish-deb
index 01e5df1d..cd8f44a8 100755
--- a/scripts/publish-deb
+++ b/scripts/publish-deb
@@ -262,5 +262,5 @@ aws cloudfront create-invalidation --distribution-id ${AWS_CLOUDFRONT_DIST_ID} -
 # delete packages that have been pruned
 # the dryrun option is there so we can check that we're doing the right thing, can be removed after testing
 if [[ ${repo} == "deb-dev" ]]; then
-  aws s3 sync "${tmp_repo_path}/${debSuite}" ${s3_bucket_repo} --dryrun --delete
+  aws s3 sync "${tmp_repo_path}/${debSuite}" ${s3_bucket_repo} --dryrun --delete --acl public-read
 fi
diff --git a/scripts/publish-rpm b/scripts/publish-rpm
index 382e044b..96b0348d 100755
--- a/scripts/publish-rpm
+++ b/scripts/publish-rpm
@@ -189,5 +189,5 @@ aws cloudfront create-invalidation --distribution-id ${AWS_CLOUDFRONT_DIST_ID} -
 # delete packages that have been pruned
 # the dryrun option is there so we can check that we're doing the right thing, can be removed after testing
 if [[ ${repo} == "rpm-dev" ]]; then
-  aws s3 sync ${tmp_repo_path} ${s3_bucket_repo} --dryrun --delete
+  aws s3 sync ${tmp_repo_path} ${s3_bucket_repo} --dryrun --delete --acl public-read
 fi