diff --git a/docs/gitrepo-add.md b/docs/gitrepo-add.md
index 92640f886..aaac7071a 100644
--- a/docs/gitrepo-add.md
+++ b/docs/gitrepo-add.md
@@ -207,7 +207,8 @@ Just like with SSH, reference the secret in your GitRepo resource via `clientSec
 
 :::warning
 The credentials will be used unconditionally for all Helm repositories referenced by the gitrepo resource.
-Make sure you don't leak credentials by mixing public and private repositories. As a workaround, split them into different gitrepos.
+Make sure you don't leak credentials by mixing public and private repositories. Split them into different gitrepos, or use
+`helmRepoUrlRegex` to limit the scope of credentials to certain servers.
 :::
 
 For a private Helm repo, users can reference a secret with the following keys: