diff --git a/.github/workflows/push-rockspec.yml b/.github/workflows/push-rockspec.yml
index d8f8b27..091f280 100644
--- a/.github/workflows/push-rockspec.yml
+++ b/.github/workflows/push-rockspec.yml
@@ -25,15 +25,6 @@ jobs:
     - run: tarantoolctl rocks new_version --tag=${{ env.TAG }} rockspecs/config-scm-5.rockspec ${{ env.TAG }} "git+https://github.com/${{ github.repository }}.git"
     - run: tarantoolctl rocks --server https://moonlibs.github.io/rocks install ${{ env.ROCK_NAME }}-${{ env.TAG }}-1.rockspec
     - run: tarantoolctl rocks pack ${{ env.ROCK_NAME }}-${{ env.TAG }}-1.rockspec
-
-    - uses: "marvinpinto/action-automatic-releases@latest"
-      with:
-        repo_token: "${{ secrets.GITHUB_TOKEN }}"
-        prerelease: false
-        files: |
-          README.md
-          *.rockspec
-          *.src.rock
     # Install native lua with luarocks
     - uses: leafo/gh-actions-lua@v9
       with:
@@ -42,11 +33,19 @@ jobs:
       with:
         luarocksVersion: "3.8.0"
     - uses: unfor19/install-aws-cli-action@v1.0.3
-    - run: mkdir .build && cp *.rockspec .build/ && cp *.src.rock .build/
+    - run: mkdir .build && cp ${{env.ROCK_NAME}}-${{env.TAG}}-1.rockspec .build/ && cp *.src.rock .build/
     - name: rebuild and publish s3 luarocks server
       env:
         AWS_ACCESS_KEY_ID: ${{ secrets.MOONLIBS_S3_ACCESS_KEY_ID }}
         AWS_SECRET_ACCESS_KEY: ${{ secrets.MOONLIBS_S3_SECRET_KEY}}
         AWS_EC2_METADATA_DISABLED: true
       run: |
-        cd .build && aws s3 sync s3://moonlibs/ ./ && luarocks-admin make_manifest . && aws s3 sync ./ s3://moonlibs/;
\ No newline at end of file
+        cd .build && aws s3 sync s3://moonlibs/ ./ && luarocks-admin make_manifest . && aws s3 sync --acl public-read ./ s3://moonlibs/;
+    - uses: "marvinpinto/action-automatic-releases@latest"
+      with:
+        repo_token: "${{ secrets.GITHUB_TOKEN }}"
+        prerelease: false
+        files: |
+          README.md
+          *.rockspec
+          *.src.rock