diff --git a/.github/workflows/validate-pipelines.yaml b/.github/workflows/validate-pipelines.yaml
index d8be8269..c833741d 100644
--- a/.github/workflows/validate-pipelines.yaml
+++ b/.github/workflows/validate-pipelines.yaml
@@ -50,6 +50,7 @@ jobs:
                 id_token_include_email: true
             - uses: getsentry/action-gocd-jsonnet@v1
               with:
+                go-version: "1.25"
                 jb-install: true
                 jsonnet-dir: gocd/templates
                 generated-dir: gocd/generated-pipelines
diff --git a/gocd/templates/bash/check-github.sh b/gocd/templates/bash/check-github.sh
index afd1d8bb..16b7b93d 100644
--- a/gocd/templates/bash/check-github.sh
+++ b/gocd/templates/bash/check-github.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-checks-githubactions-checkruns \
+checks-githubactions-checkruns2 \
 	getsentry/vroom \
 	${GO_REVISION_VROOM_REPO} \
 	test-vroom \
diff --git a/gocd/templates/pipelines/vroom.libsonnet b/gocd/templates/pipelines/vroom.libsonnet
index 59a66ba2..26d92833 100644
--- a/gocd/templates/pipelines/vroom.libsonnet
+++ b/gocd/templates/pipelines/vroom.libsonnet
@@ -28,7 +28,8 @@ local deploy_canary_stage(region) =
 
 function(region) {
   environment_variables: {
-    GITHUB_TOKEN: '{{SECRET:[devinfra-github][token]}}',
+    GITHUB_APP_ID: '{{SECRET:[devinfra-github][app_id]}}',
+    GITHUB_APP_PRIVATE_KEY: '{{SECRET:[devinfra-github][private_key]}}',
     SENTRY_REGION: region,
     SKIP_CANARY_CHECKS: false,
   },