Leak: `jx gitops helmfile report` exposes helm repo credentials when used with private `helm-git` repo

I noticed that `jx gitops helmfile report` when ran against a a helmfile that contains releases that are pulled in through the `helm-git` plugin results in `docs/releases.yaml` containing secrets, like this example:

`repositoryUrl: git+https://myUser:myPAT@gitlab.com/myCorp/gitlab-runner-helm@?ref=v0.48.0&sparse=0`

Please advise of any work around.

Thank you.