diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4cdaa6686..947eebeea 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,7 @@
 ### Modified
 
 ### Fixed
+- jenkins agents can not import private keys into gpg keyring to use with helm secrets ([#945](https://github.com/opendevstack/ods-quickstarters/issues/945))
 - Streamlit quickstarter build fails to import nexus host certificates into truststore ([#951](https://github.com/opendevstack/ods-quickstarters/issues/951))
 
 ## [4.3.0] - 2023-07-13
diff --git a/common/jenkins-agents/jdk/docker/Dockerfile.ubi8 b/common/jenkins-agents/jdk/docker/Dockerfile.ubi8
index 6bdb7aff6..a827722ee 100644
--- a/common/jenkins-agents/jdk/docker/Dockerfile.ubi8
+++ b/common/jenkins-agents/jdk/docker/Dockerfile.ubi8
@@ -85,7 +85,7 @@ RUN mkdir -p $GRADLE_USER_HOME && \
 RUN bash -l -c 'echo export JAVA_OPTS="$(/tmp/set_java_proxy.sh && echo $JAVA_OPTS)" >> /etc/bash.bashrc'
 
 RUN chown -R 1001:0 $HOME && \
-    chmod -R g+rw $HOME && \
+    chmod -R g+rwX $HOME && \
     chmod -c 666 /etc/pki/ca-trust/extracted/java/cacerts && \
     ls -la /etc/pki/ca-trust/extracted/java/cacerts
 
diff --git a/common/jenkins-agents/nodejs12/docker/Dockerfile.ubi8 b/common/jenkins-agents/nodejs12/docker/Dockerfile.ubi8
index ce6233c4d..76c74f53b 100644
--- a/common/jenkins-agents/nodejs12/docker/Dockerfile.ubi8
+++ b/common/jenkins-agents/nodejs12/docker/Dockerfile.ubi8
@@ -73,6 +73,6 @@ RUN npm config set registry=$nexusUrl/repository/npmjs/ && \
     echo yarn version: $(yarn --version)
 
 RUN chown -R 1001:0 $HOME && \
-    chmod -R g+rw $HOME
+    chmod -R g+rwX $HOME
 
 USER 1001
diff --git a/common/jenkins-agents/nodejs16/docker/Dockerfile.ubi8 b/common/jenkins-agents/nodejs16/docker/Dockerfile.ubi8
index 247e7616c..aa806f43b 100644
--- a/common/jenkins-agents/nodejs16/docker/Dockerfile.ubi8
+++ b/common/jenkins-agents/nodejs16/docker/Dockerfile.ubi8
@@ -57,6 +57,6 @@ RUN npm config set registry=$nexusUrl/repository/npmjs/ && \
     echo yarn version: $(yarn --version)
 
 RUN chown -R 1001:0 $HOME && \
-    chmod -R g+rw $HOME
+    chmod -R g+rwX $HOME
 
 USER 1001
diff --git a/common/jenkins-agents/nodejs18/docker/Dockerfile.ubi8 b/common/jenkins-agents/nodejs18/docker/Dockerfile.ubi8
index 018eb6ee8..57f49f3be 100644
--- a/common/jenkins-agents/nodejs18/docker/Dockerfile.ubi8
+++ b/common/jenkins-agents/nodejs18/docker/Dockerfile.ubi8
@@ -56,6 +56,6 @@ RUN npm config set registry=$nexusUrl/repository/npmjs/ && \
     echo yarn version: $(yarn --version)
 
 RUN chown -R 1001:0 $HOME && \
-    chmod -R g+rw $HOME
+    chmod -R g+rwX $HOME
 
 USER 1001
diff --git a/common/jenkins-agents/terraform-2306/docker/Dockerfile.ubi8 b/common/jenkins-agents/terraform-2306/docker/Dockerfile.ubi8
index cc3831ef2..1ab245ac9 100644
--- a/common/jenkins-agents/terraform-2306/docker/Dockerfile.ubi8
+++ b/common/jenkins-agents/terraform-2306/docker/Dockerfile.ubi8
@@ -159,7 +159,7 @@ RUN dnf install -y https://github.com/mozilla/sops/releases/download/v${SOPS_VER
 
 RUN chmod +t /tmp \
     && chown -R 1001:0 $HOME \
-    && chmod -R g+rw $HOME \
+    && chmod -R g+rwX $HOME \
     && mkdir -p $GEM_HOME \
     && chmod 2770 $GEM_HOME
 
diff --git a/common/jenkins-agents/terraform/docker/Dockerfile.ubi8 b/common/jenkins-agents/terraform/docker/Dockerfile.ubi8
index 4d4c417f2..dc34ed3a7 100644
--- a/common/jenkins-agents/terraform/docker/Dockerfile.ubi8
+++ b/common/jenkins-agents/terraform/docker/Dockerfile.ubi8
@@ -147,7 +147,7 @@ RUN dnf install -y https://github.com/mozilla/sops/releases/download/v${SOPS_VER
 
 RUN chmod +t /tmp \
     && chown -R 1001:0 $HOME \
-    && chmod -R g+rw $HOME \
+    && chmod -R g+rwX $HOME \
     && mkdir -p $GEM_HOME \
     && chmod 2770 $GEM_HOME