diff --git a/.drone.yml b/.drone.yml
index 655828b38cb..bbe73acf416 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -5907,7 +5907,7 @@ name: gar
 ---
 get:
   name: pat
-  path: infra/data/ci/github/grafanabot
+  path: ci/data/repo/grafana/grafana/grafanabot
 kind: secret
 name: github_token
 ---
@@ -6074,6 +6074,6 @@ kind: secret
 name: gcr_credentials
 ---
 kind: signature
-hmac: 05a965bddd23cd5f950b68159697a19fc2847fce81c65643205dc3a361c4fece
+hmac: 191c339ebaea71688598006d5b3b7abf073fe1fc054ef82cdc0a87f5080c4e06
 
 ...
diff --git a/scripts/drone/vault.star b/scripts/drone/vault.star
index 7c90b89ca5d..a15a17f5060 100644
--- a/scripts/drone/vault.star
+++ b/scripts/drone/vault.star
@@ -46,7 +46,7 @@ def secrets():
         vault_secret("grafana_api_key", "infra/data/ci/grafana-release-eng/grafanacom", "api_key"),
         vault_secret(gcr_pull_secret, "secret/data/common/gcr", ".dockerconfigjson"),
         vault_secret(gar_pull_secret, "secret/data/common/gar", ".dockerconfigjson"),
-        vault_secret("github_token", "infra/data/ci/github/grafanabot", "pat"),
+        vault_secret("github_token", "ci/data/repo/grafana/grafana/grafanabot", "pat"),
         vault_secret(drone_token, "infra/data/ci/drone", "machine-user-token"),
         vault_secret(prerelease_bucket, "infra/data/ci/grafana/prerelease", "bucket"),
         vault_secret(docker_username, "infra/data/ci/grafanaci-docker-hub", "username"),