diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 8d418d258cbe6a6a4b5392e7c3c1d83fbd70d6c8..b8ba17ff0eeaa5519899cb58bdb3b477c9729131 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -23,9 +23,7 @@ default:
     - 1cpu-4gb # default small, configure more explicitly on specific jobs
   before_script:
     - set -e
-    # env -0 | sort -z | tr '\0' '\n': Sort env output alphabetically, keeping multiline variables intact
-    # egrep: Remove sensitive information from the output of env
-    #- env -0 | sort -z | tr '\0' '\n' | egrep -ve '^(DOCKER_AUTH_CONFIG|GOOGLE_APPLICATION_CREDENTIALS)=.*'
+    # DANGER don't use `set -x` or print the environment via e.g. `env` in pipeline runs, this might leak credentials (has leaked them)
 
 stages:
   - prepare