diff --git a/artifacts/artifacts.go b/artifacts/artifacts.go
index 1499d0a..f77dd02 100644
--- a/artifacts/artifacts.go
+++ b/artifacts/artifacts.go
@@ -20,7 +20,7 @@
 
 // NewClient creates a new Client.
 func NewClient(ctx context.Context, opts auth.Options) (*Client, error) {
-	opts.Scopes = append(opts.Scopes, storage.ScopeFullControl)
+	opts.Scopes = append(opts.Scopes, storage.ScopeReadWrite)
 	client, err := gcs.NewClient(ctx, opts)
 	if err != nil {
 		return nil, err