diff --git a/.drone.yml b/.drone.yml
index 05d7de1b53e..3d29e9090cf 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -3822,6 +3822,8 @@ volumes:
 - host:
     path: /var/run/docker.sock
   name: docker
+- name: github-app
+  temp: {}
 ---
 clone:
   retries: 3
@@ -4911,6 +4913,8 @@ volumes:
 - host:
     path: /var/run/docker.sock
   name: docker
+- name: github-app
+  path: /github-app
 ---
 clone:
   retries: 3
@@ -5735,6 +5739,6 @@ kind: secret
 name: gcr_credentials
 ---
 kind: signature
-hmac: 61407f1b2121b47310d02c2eb313abe5112924b4f8f2ba5ed5aff4a78308aea0
+hmac: 65ebf9abca7cfdb688c77bb47650aad3e4716a4a23350ef7a601de48f56ed02e
 
 ...
diff --git a/scripts/drone/events/release.star b/scripts/drone/events/release.star
index 23da2d91d25..f7730176f61 100644
--- a/scripts/drone/events/release.star
+++ b/scripts/drone/events/release.star
@@ -175,6 +175,7 @@ def publish_artifacts_pipelines(mode):
             trigger = trigger,
             steps = steps,
             environment = {"EDITION": "oss"},
+            volumes = github_app_pipeline_volumes(),
         ),
     ]
 
diff --git a/scripts/drone/rgm.star b/scripts/drone/rgm.star
index 4476dad6a00..61694556c37 100644
--- a/scripts/drone/rgm.star
+++ b/scripts/drone/rgm.star
@@ -380,6 +380,7 @@ def rgm_promotion_pipeline():
             name = "rgm-promotion",
             trigger = promotion_trigger,
             steps = steps,
+            volumes = github_app_step_volumes(),
         ),
     ]