diff --git a/outputs.tf b/outputs.tf
index 239d7f7..3a9d24a 100644
--- a/outputs.tf
+++ b/outputs.tf
@@ -23,9 +23,11 @@ output "cache_volume" {
 output "renovate_platform" {
   description = "Platform configured for Renovate"
   value       = data.vault_generic_secret.renovate.data["renovate_platform"]
+  sensitive   = true
 }
 
 output "renovate_endpoint" {
   description = "API endpoint configured for Renovate"
   value       = data.vault_generic_secret.renovate.data["renovate_endpoint"]
+  sensitive   = true
 }