diff --git a/.github/scripts/render_report.rb b/.github/scripts/render_report.rb
index 9ac76e86..68329d90 100755
--- a/.github/scripts/render_report.rb
+++ b/.github/scripts/render_report.rb
@@ -297,14 +297,20 @@ def format_failure_detail(failure)
     parts = []
     if failure["url"]
       url = failure["url"]
-      # Truncate long URLs for readability in tables
-      display = url.size > 80 ? "#{url[0..77]}..." : url
-      parts << "[`#{display}`](#{url})"
+      safe_url = redact_url(url)
+      parts << "[`#{safe_url}`](#{safe_url})"
     end
     parts << failure["message"].to_s if failure["message"]
     parts.join(" · ")
   end
 
+  def redact_url(url)
+    return url unless url.is_a?(String) && url.include?("?")
+
+    base = url.split("?").first
+    "#{base}?…(query redacted)"
+  end
+
   def pr_footer
     footer = "_Generated by `render_report.rb` from `results/*.json` artifacts._"
     footer += "  \n_Opens or updates the issue when this is a scheduled run._" unless @pr_number