diff --git a/.drone.yml b/.drone.yml
index 56b3eb7eabb..14be5b5958c 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -3826,6 +3826,8 @@ volumes:
 - host:
     path: /var/run/docker.sock
   name: docker
+- name: github-app
+  temp: {}
 ---
 clone:
   retries: 3
@@ -4915,6 +4917,8 @@ volumes:
 - host:
     path: /var/run/docker.sock
   name: docker
+- name: github-app
+  path: /github-app
 ---
 clone:
   retries: 3
@@ -5740,6 +5744,6 @@ kind: secret
 name: gcr_credentials
 ---
 kind: signature
-hmac: 9b3538ec1bc7180fe775bfab88591c4afb390e2620a279aab6cfe0034d288754
+hmac: f95877e361fe41e54412a7abbdf81897d58d9da26e7681b8d50bcb994e2f7909
 
 ...
diff --git a/scripts/drone/events/release.star b/scripts/drone/events/release.star
index 23da2d91d25..f7730176f61 100644
--- a/scripts/drone/events/release.star
+++ b/scripts/drone/events/release.star
@@ -175,6 +175,7 @@ def publish_artifacts_pipelines(mode):
             trigger = trigger,
             steps = steps,
             environment = {"EDITION": "oss"},
+            volumes = github_app_pipeline_volumes(),
         ),
     ]
 
diff --git a/scripts/drone/rgm.star b/scripts/drone/rgm.star
index 4476dad6a00..61694556c37 100644
--- a/scripts/drone/rgm.star
+++ b/scripts/drone/rgm.star
@@ -380,6 +380,7 @@ def rgm_promotion_pipeline():
             name = "rgm-promotion",
             trigger = promotion_trigger,
             steps = steps,
+            volumes = github_app_step_volumes(),
         ),
     ]