diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 2d29ddc..c8785a1 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -20,4 +20,5 @@ jobs:
     if: github.event_name == 'workflow_dispatch' || github.event_name == 'workflow_call' || github.event.registry_package.package_version.container_metadata.tag.name == 'meal'
     steps:
       - name: deploy
+        # The container id is not really a secret but it obfuscation doesn't hurt either
         run: 'curl --fail --show-error -H "Authorization: ${{ secrets.TUGBOAT_TOKEN }}" --request POST https://tugboat.claa.sh/containers/${{ secrets.TUGBOAT_DELIVERY_SERVICE_CONTAINER_ID }}/update'