diff --git a/pkgs/plt-services/meta/pkg-index/official/s3.rkt b/pkgs/plt-services/meta/pkg-index/official/s3.rkt
index c9ba7aeccd..73a259ccc9 100644
--- a/pkgs/plt-services/meta/pkg-index/official/s3.rkt
+++ b/pkgs/plt-services/meta/pkg-index/official/s3.rkt
@@ -20,7 +20,7 @@
            "sync"
            "-m" "application/javascript"
            "--acl-public"
-           "--add-header" "Content-Encoding: gzip"
+           "--add-header" "Content-Encoding:gzip"
            "--delete-removed"
            (format "~a/pkgs-all.json.gz" static-path)
            (format "s3://~a/pkgs-all.json.gz" s3-bucket))
diff --git a/pkgs/plt-services/meta/pkg-index/official/update.rkt b/pkgs/plt-services/meta/pkg-index/official/update.rkt
index 5e45c61d1d..9c289a41ca 100644
--- a/pkgs/plt-services/meta/pkg-index/official/update.rkt
+++ b/pkgs/plt-services/meta/pkg-index/official/update.rkt
@@ -23,7 +23,10 @@
           (define i (package-info pkg-name))
           (package-info-set!
            pkg-name
-           (hash-set i 'checksum-error (exn-message x))))])
+           (hash-set i 'checksum-error
+                     (regexp-replace* (regexp (github-client_secret))
+                                      (exn-message x)
+                                      "REDACTED"))))])
     (define i (package-info pkg-name))
     (define old-checksum
       (package-ref i 'checksum))