diff --git a/server/updater/github.go b/server/updater/github.go
index d0bcddc45..a35547a47 100644
--- a/server/updater/github.go
+++ b/server/updater/github.go
@@ -35,6 +35,7 @@ func NewRepo(log *util.Logger, owner, repository string) *Repo {
 	client := request.NewClient(log)
 
 	if token := os.Getenv("GITHUB_TOKEN"); token != "" {
+		log.Redact(token)
 		ctx := context.WithValue(context.Background(), oauth2.HTTPClient, client)
 		client = oauth2.NewClient(ctx, oauth2.StaticTokenSource(&oauth2.Token{
 			AccessToken: token,