diff --git a/.drone.yml b/.drone.yml
index 25995d2b286..0a94ff194a4 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -3107,6 +3107,8 @@ volumes:
 - host:
     path: /var/run/docker.sock
   name: docker
+- name: github-app
+  temp: {}
 ---
 clone:
   retries: 3
@@ -4154,6 +4156,8 @@ volumes:
 - host:
     path: /var/run/docker.sock
   name: docker
+- name: github-app
+  path: /github-app
 ---
 clone:
   retries: 3
@@ -4977,6 +4981,6 @@ kind: secret
 name: gcr_credentials
 ---
 kind: signature
-hmac: 9676f89be1f61299d22961558e3636b6702c737f64c78bc40bbbc4a302cf4a6b
+hmac: 56063200d17b3fb138b434997203adde68518e665dc2ddd30834cf7a63088da2
 
 ...
diff --git a/scripts/drone/events/release.star b/scripts/drone/events/release.star
index f02e71adb11..5d6e3d0213b 100644
--- a/scripts/drone/events/release.star
+++ b/scripts/drone/events/release.star
@@ -175,6 +175,7 @@ def publish_artifacts_pipelines(mode):
             trigger = trigger,
             steps = steps,
             environment = {"EDITION": "oss"},
+            volumes = github_app_pipeline_volumes(),
         ),
     ]
 
diff --git a/scripts/drone/rgm.star b/scripts/drone/rgm.star
index 4476dad6a00..61694556c37 100644
--- a/scripts/drone/rgm.star
+++ b/scripts/drone/rgm.star
@@ -380,6 +380,7 @@ def rgm_promotion_pipeline():
             name = "rgm-promotion",
             trigger = promotion_trigger,
             steps = steps,
+            volumes = github_app_step_volumes(),
         ),
     ]