diff --git a/.gitea/workflows/build-kernel.yml b/.gitea/workflows/build-kernel.yml
index e7f817d..03459cc 100644
--- a/.gitea/workflows/build-kernel.yml
+++ b/.gitea/workflows/build-kernel.yml
@@ -142,6 +142,7 @@ jobs:
           cp -r dist/modules "$root"/       # modules/iec_listener_<kernel_version>.ko
           cp kernel/selftest.sh "$root"/    # one-shot hardware self-test
           cp launch.sh "$root"/             # load module -> run frontend -> unload
+          chmod +x "$root/launch.sh" "$root/selftest.sh"
           # iecpoc Python frontend + its packaging metadata. launch.sh pip-installs
           # this on the Pi; the build reads pyproject.toml's readme = "README.md",
           # so README.md must travel with it. __pycache__ is stripped to stay clean.