diff --git a/pipelines/main/update-pipeline.sh b/pipelines/main/update-pipeline.sh
index 475711ec4..59fcb0c94 100755
--- a/pipelines/main/update-pipeline.sh
+++ b/pipelines/main/update-pipeline.sh
@@ -13,4 +13,5 @@ set_pipeline "$pipeline" "$script_dir/pipeline.yml"
 ensure_time_resource_has_at_least_one_version "$pipeline" weekdays
 
 # Make the pipeline visible to non-authenticated users in the web UI.
-$FLY_CLI --target "$CONCOURSE_TARGET" expose-pipeline --pipeline "$pipeline"
+# TODO: make this public again
+#$FLY_CLI --target "$CONCOURSE_TARGET" expose-pipeline --pipeline "$pipeline"
diff --git a/pipelines/pull-requests/update-pipeline.sh b/pipelines/pull-requests/update-pipeline.sh
index 806cf7ff8..6ec928829 100755
--- a/pipelines/pull-requests/update-pipeline.sh
+++ b/pipelines/pull-requests/update-pipeline.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-# Copyright 2020-2024 the Pinniped contributors. All Rights Reserved.
+# Copyright 2020-2025 the Pinniped contributors. All Rights Reserved.
 # SPDX-License-Identifier: Apache-2.0
 
 set -euo pipefail
@@ -12,4 +12,5 @@ source "$script_dir/../../hack/fly-helpers.sh"
 set_pipeline "$pipeline" "$script_dir/pipeline.yml"
 
 # Make the pipeline visible to non-authenticated users in the web UI.
-$FLY_CLI --target "$CONCOURSE_TARGET" expose-pipeline --pipeline "$pipeline"
+# TODO: make this public again
+#$FLY_CLI --target "$CONCOURSE_TARGET" expose-pipeline --pipeline "$pipeline"