diff --git a/.changeset/dry-mirrors-shake.md b/.changeset/dry-mirrors-shake.md
new file mode 100644
index 00000000000..fc0c47f493a
--- /dev/null
+++ b/.changeset/dry-mirrors-shake.md
@@ -0,0 +1,5 @@
+---
+"trigger.dev": patch
+---
+
+Build logs no longer include docker's registry login output, most notably the credential-storage warning on failed builds.
diff --git a/packages/cli-v3/src/deploy/buildImage.ts b/packages/cli-v3/src/deploy/buildImage.ts
index 37990af2591..f173b2f01a7 100644
--- a/packages/cli-v3/src/deploy/buildImage.ts
+++ b/packages/cli-v3/src/deploy/buildImage.ts
@@ -514,8 +514,12 @@ async function localBuildImage(options: SelfHostedBuildImageOptions): Promise<Bu
     loginProcess.process?.stdin?.write(credentials.password);
     loginProcess.process?.stdin?.end();
 
+    // Login output (incl. docker's credential-storage warning) stays out of the build
+    // logs; it is fully visible at debug level and returned when the login itself fails.
+    const loginLogs: string[] = [];
+
     for await (const line of loginProcess) {
-      errors.push(line);
+      loginLogs.push(line);
       logger.debug(line);
     }
 
@@ -523,10 +527,12 @@ async function localBuildImage(options: SelfHostedBuildImageOptions): Promise<Bu
       return {
         ok: false as const,
         error: `Failed to login to registry: ${cloudRegistryHost}`,
-        logs: extractLogs(errors),
+        logs: extractLogs(loginLogs),
       };
     }
 
+    // `errors` is the shared build log buffer; keep a marker there so failure logs show auth ran
+    errors.push(`Logged in to ${cloudRegistryHost}`);
     options.onLog?.(`Successfully logged in to the remote registry`);
   }