diff --git a/Pulumi.github.yaml b/Pulumi.github.yaml
index 86eea02..148b04c 100644
--- a/Pulumi.github.yaml
+++ b/Pulumi.github.yaml
@@ -47,3 +47,5 @@ config:
     secure: AAABAHnzklqdwRGuZktNgbwY8fqwFMl5DM8jrN7AuFz6NXAvaJBukfoUvYFoq5YQObo6eaooQbInhK6LAw8mulpGjhzCQmUsFLLlIHrShD28k9iKaKnfpkiE/SRzzuVSoJAdKxS0tg6fdpPIMAc=
   holochain:threefoldHubApiToken:
     secure: AAABACRJURtkQbAnZmbb7tYn3e70n48fyccTJ3/4op0AmLxrkO4doFfP2RqjasYq6BGKRn4KxLA65MDC73PihYHh91f47hzRNXvXcPNVNTXxLuD6DP2nZwEyrcqtWjQSflW3TaiF4dsG4mD5mB96/WzS3HpbeSN+awfwOUHJl1GYGDEmhbLynbPjEnwIYVsp3KRj7oHwuZqVlQzWL+dKOA==
+  holochain:holochainNotifierMattermostBotPersonalAccessToken:
+    secure: AAABAPtRAqf196Q3aegG6xzfp48LghBm3yQjyZRKh/7wbvrVCNcl8TJuIGx90oePw0sVcUxCXKhdPA==
diff --git a/main.go b/main.go
index c385d9a..c69608f 100644
--- a/main.go
+++ b/main.go
@@ -153,6 +153,9 @@ func main() {
 		if err = AddThreefoldTfChainWalletMnemonic(ctx, conf, "wind-tunnel"); err != nil {
 			return err
 		}
+		if err = AddHolochainNotifierMattermostBotPersonalAccessToken(ctx, conf, "wind-tunnel"); err != nil {
+			return err
+		}
 
 		//
 		// Holochain JS client
@@ -1823,6 +1826,17 @@ func AddThreefoldHubApiToken(ctx *pulumi.Context, cfg *config.Config, repository
 	return err
 }
 
+func AddHolochainNotifierMattermostBotPersonalAccessToken(ctx *pulumi.Context, cfg *config.Config, repository string) error {
+	_, err := github.NewActionsSecret(ctx, fmt.Sprintf("%s-holochain-notifier-mattermost-bot-personal-access-token", repository), &github.ActionsSecretArgs{
+		Repository: pulumi.String(repository),
+		SecretName: pulumi.String("HOLOCHAIN_NOTIFIER_MATTERMOST_BOT_PERSONAL_ACCESS_TOKEN"),
+		// The GitHub API only accepts encrypted values. This will be encrypted by the provider before being sent.
+		PlaintextValue: cfg.RequireSecret("holochainNotifierMattermostBotPersonalAccessToken"),
+	}, pulumi.DeleteBeforeReplace(true), pulumi.IgnoreChanges([]string{"encryptedValue"}))
+
+	return err
+}
+
 // RepositoryLabel represents a standard label that can be applied to repositories.
 type RepositoryLabel string