diff --git a/.github/workflows/credcheck.yml b/.github/workflows/credcheck.yml
index 3f2a640e9..73d90ec35 100644
--- a/.github/workflows/credcheck.yml
+++ b/.github/workflows/credcheck.yml
@@ -27,12 +27,14 @@ jobs:
         with:
           secrets: |
             development/artifactory/token/{REPO_OWNER_NAME_DASH}-private-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
+            development/kv/data/visualstudio VSCE_TOKEN | VISUALSTUDIO_PAT;
+            development/team/sonarlint/kv/data/openvsx token | OPENVSX_TOKEN;
 
       - name: Check marketplace publisher personal access token
         if: ${{ !cancelled() }}
         env:
           ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
-          VSCE_TOKEN: ${{ secrets.VISUALSTUDIO_PAT }}
+          VSCE_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).VISUALSTUDIO_PAT }}
         working-directory: ./.github/actions/vsce-publish
         run: |
           cp ${GITHUB_WORKSPACE}/.cirrus/.npmrc ./.npmrc
@@ -43,7 +45,7 @@ jobs:
         if: ${{ !cancelled() }}
         env:
           ARTIFACTORY_ACCESS_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
-          OPENVSX_TOKEN: ${{ secrets.OPENVSX_TOKEN }}
+          OPENVSX_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).OPENVSX_TOKEN }}
         working-directory: ./.github/actions/ovsx-publish
         run: |
           cp ${GITHUB_WORKSPACE}/.cirrus/.npmrc ./.npmrc
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 135eed4d4..7147c4e43 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -48,6 +48,7 @@ jobs:
         with:
           secrets: |
             development/artifactory/token/{REPO_OWNER_NAME_DASH}-private-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
+            development/kv/data/visualstudio VSCE_TOKEN | VISUALSTUDIO_PAT;
       - name: Install dependencies for vsce-publish
         run: |
           cp ${GITHUB_WORKSPACE}/.cirrus/.npmrc ./.npmrc
@@ -91,7 +92,7 @@ jobs:
         env:
           ARTIFACT_FILE: ${{ steps.download_artifact.outputs.artifactFile }}
           TARGET_PLATFORM: ${{ matrix.platform }}
-          VSCE_TOKEN: ${{ secrets.VISUALSTUDIO_PAT }}
+          VSCE_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).VISUALSTUDIO_PAT }}
         uses: ./.github/actions/vsce-publish
 
   deploy_to_openvsx:
@@ -116,6 +117,7 @@ jobs:
         with:
           secrets: |
             development/artifactory/token/{REPO_OWNER_NAME_DASH}-private-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
+            development/team/sonarlint/kv/data/openvsx token | OPENVSX_TOKEN;
       - name: Install dependencies for ovsx-publish
         run: |
           cp ${GITHUB_WORKSPACE}/.cirrus/.npmrc ./.npmrc
@@ -154,5 +156,5 @@ jobs:
         id: ovsx_publish
         env:
           ARTIFACT_FILE: ${{ steps.download_artifact.outputs.artifactFile }}
-          OPENVSX_TOKEN: ${{ secrets.OPENVSX_TOKEN }}
+          OPENVSX_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).OPENVSX_TOKEN }}
         uses: ./.github/actions/ovsx-publish