diff --git a/.dev.env.enc b/cloudbuild/.dev.env.enc
similarity index 100%
rename from .dev.env.enc
rename to cloudbuild/.dev.env.enc
diff --git a/cloudbuild/.staging.env.enc b/cloudbuild/.staging.env.enc
index cd8a7c818..d0928f6cc 100644
Binary files a/cloudbuild/.staging.env.enc and b/cloudbuild/.staging.env.enc differ
diff --git a/lib/logflare/google/resource_manager.ex b/lib/logflare/google/resource_manager.ex
index 5f3e37476..ff06e3510 100644
--- a/lib/logflare/google/resource_manager.ex
+++ b/lib/logflare/google/resource_manager.ex
@@ -152,6 +152,10 @@ defmodule Logflare.Google.CloudResourceManager do
       %Model.Binding{
         members: ["serviceAccount:#{env_cloud_build_trigger_sa()}"],
         role: "roles/iam.serviceAccountUser"
+      },
+      %Model.Binding{
+        members: ["serviceAccount:#{env_cloud_build_trigger_sa()}"],
+        role: "roles/cloudbuild.serviceAgent"
       }
     ]
   end
diff --git a/test/logflare/google/resource_manager_test.exs b/test/logflare/google/resource_manager_test.exs
index f8b268a8a..3d76be6d2 100644
--- a/test/logflare/google/resource_manager_test.exs
+++ b/test/logflare/google/resource_manager_test.exs
@@ -148,6 +148,10 @@ defmodule Logflare.Google.CloudResourceManagerTest do
       %Binding{
         members: ["serviceAccount:#{google_configs.cloud_build_trigger_sa}"],
         role: "roles/iam.serviceAccountUser"
+      },
+      %Binding{
+        members: ["serviceAccount:#{google_configs.cloud_build_trigger_sa}"],
+        role: "roles/cloudbuild.serviceAgent"
       }
     ]
   end