diff --git a/.drone.yml b/.drone.yml
index 54394e5de0d..7093d418486 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -5214,7 +5214,7 @@ name: gar
 ---
 get:
   name: pat
-  path: infra/data/ci/github/grafanabot
+  path: ci/data/repo/grafana/grafana/grafanabot
 kind: secret
 name: github_token
 ---
@@ -5381,6 +5381,6 @@ kind: secret
 name: gcr_credentials
 ---
 kind: signature
-hmac: f849714663e8601fb31344bfb7550c5a4fc77c66ce4176c79bbd40179b678055
+hmac: bd7d2b32723a2da2c19a372046ed8d3ff6ba9439db0b18be435175c931bfaf4f
 
 ...
diff --git a/scripts/drone/vault.star b/scripts/drone/vault.star
index 7c90b89ca5d..a15a17f5060 100644
--- a/scripts/drone/vault.star
+++ b/scripts/drone/vault.star
@@ -46,7 +46,7 @@ def secrets():
         vault_secret("grafana_api_key", "infra/data/ci/grafana-release-eng/grafanacom", "api_key"),
         vault_secret(gcr_pull_secret, "secret/data/common/gcr", ".dockerconfigjson"),
         vault_secret(gar_pull_secret, "secret/data/common/gar", ".dockerconfigjson"),
-        vault_secret("github_token", "infra/data/ci/github/grafanabot", "pat"),
+        vault_secret("github_token", "ci/data/repo/grafana/grafana/grafanabot", "pat"),
         vault_secret(drone_token, "infra/data/ci/drone", "machine-user-token"),
         vault_secret(prerelease_bucket, "infra/data/ci/grafana/prerelease", "bucket"),
         vault_secret(docker_username, "infra/data/ci/grafanaci-docker-hub", "username"),