diff --git a/.github/workflows/danger.yml b/.github/workflows/danger.yml
index 040beda21b..7a04b44090 100644
--- a/.github/workflows/danger.yml
+++ b/.github/workflows/danger.yml
@@ -15,7 +15,6 @@ jobs:
         bundler-cache: true
     - name: Run Danger
       run: |
-        # the token is public, this is ok
-        TOKEN='b8b19daa0ade737762c'
-        TOKEN+='f35edcb328642d371ce86'
+        # the token is public, has public_repo scope and belongs to the grape-bot user owned by @dblock, this is ok
+        TOKEN=$(echo -n Z2hwX2lYb0dPNXNyejYzOFJyaTV3QUxUdkNiS1dtblFwZTFuRXpmMwo= | base64 --decode)
         DANGER_GITHUB_API_TOKEN=$TOKEN bundle exec danger --verbose