diff --git a/src/utils.ts b/src/utils.ts
index 579c72a9..327a825c 100644
--- a/src/utils.ts
+++ b/src/utils.ts
@@ -485,7 +485,10 @@ index-url = ${indexUrl}
     fs.writeFileSync(configPath, configContent, {encoding: 'utf8'});
     core.info(`Successfully created pip config file at: ${configPath}`);
 
-    // Mask the password in logs if credentials were used
+    // Mask credentials in logs if they were used
+    if (username) {
+      core.setSecret(username);
+    }
     if (password) {
       core.setSecret(password);
     }