diff --git a/.drone.yml b/.drone.yml
index 088c89834c2..20909f14ac1 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -5184,7 +5184,7 @@ name: gar
 ---
 get:
   name: pat
-  path: infra/data/ci/github/grafanabot
+  path: ci/data/repo/grafana/grafana/grafanabot
 kind: secret
 name: github_token
 ---
@@ -5351,6 +5351,6 @@ kind: secret
 name: gcr_credentials
 ---
 kind: signature
-hmac: 06b46f8764255bc4d4b8650f6429d10ad2a58d1ada62307ff42706d3ed113d59
+hmac: a4795631c5fa66603119a6c9318e8934a334e96271e27539366089923abf28f4
 
 ...
diff --git a/scripts/drone/vault.star b/scripts/drone/vault.star
index 7c90b89ca5d..a15a17f5060 100644
--- a/scripts/drone/vault.star
+++ b/scripts/drone/vault.star
@@ -46,7 +46,7 @@ def secrets():
         vault_secret("grafana_api_key", "infra/data/ci/grafana-release-eng/grafanacom", "api_key"),
         vault_secret(gcr_pull_secret, "secret/data/common/gcr", ".dockerconfigjson"),
         vault_secret(gar_pull_secret, "secret/data/common/gar", ".dockerconfigjson"),
-        vault_secret("github_token", "infra/data/ci/github/grafanabot", "pat"),
+        vault_secret("github_token", "ci/data/repo/grafana/grafana/grafanabot", "pat"),
         vault_secret(drone_token, "infra/data/ci/drone", "machine-user-token"),
         vault_secret(prerelease_bucket, "infra/data/ci/grafana/prerelease", "bucket"),
         vault_secret(docker_username, "infra/data/ci/grafanaci-docker-hub", "username"),