The umask used in Gitlab-CI is such that the tarball contains files with drwxrwxrwx or -rw-rw-rw- permissions. Change them to something more reasonable for the released artifact.
drwxrwxrwx
-rw-rw-rw-
(now based on !319 (merged))