diff --git a/.gitignore b/.gitignore
index 24f2a05..50a9cd4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -12,5 +12,5 @@ __pycache__/
 src/secrets/**
 dist/
 out/
-secrets/
+tmp/
 coverage/
diff --git a/integration/lib.sh b/integration/lib.sh
index ccd3876..6537784 100755
--- a/integration/lib.sh
+++ b/integration/lib.sh
@@ -29,7 +29,7 @@ readonly FORGEJO_USER1_PASSWORD=supercomplicatedpassword
 readonly FORGEJO_USER1_EMAIL="$FORGEJO_USER1_USERNAME@example.org"
 readonly FORGEJO_USER1_SUPPORT_REPO="support"
 readonly FORGEJO_USER1_ACCESS_TOKEN_NAME="coreaccesstoken"
-readonly FORGEJO_USER1_ACCESS_TOKEN_FILE_PATH=$(realpath secrets/user1-accesstoken.json)
+readonly FORGEJO_USER1_ACCESS_TOKEN_FILE_PATH=$(realpath tmp/user1-accesstoken.json)
 rm $FORGEJO_USER1_ACCESS_TOKEN_FILE_PATH || true
 
 readonly FORGEJO_TESTUSER_USERNAME=test_user
diff --git a/src/api.test.ts b/src/api.test.ts
index cce70c9..f4a59d6 100644
--- a/src/api.test.ts
+++ b/src/api.test.ts
@@ -3,7 +3,7 @@
 // SPDX-License-Identifier: AGPL-3.0-or-later
 
 import Forgejo from "./index";
-import authtoken from "../secrets/user1-accesstoken.json";
+import authtoken from "../tmp/user1-accesstoken.json";
 
 const forgeoUrl = authtoken["forgejo_url"];
 const token = authtoken["sha1"];