diff --git a/ci/sops-keyscan.sh b/ci/sops-keyscan.sh
index 0a5a466c..b40d8e7a 100644
--- a/ci/sops-keyscan.sh
+++ b/ci/sops-keyscan.sh
@@ -4,4 +4,4 @@ ARG_NODE=$1
 shift
 ARG_HOSTNAME=$(nf-hostname "$ARG_NODE")
 
-ssh-keyscan ${NIX_SSHOPTS--p62954} "${ARG_HOSTNAME#*@}" "$@" | ssh-to-age
+ssh-keyscan ${NIX_SSHOPTS--p62954} "${ARG_HOSTNAME#*@}" "$@" | grep -v '^#' | ssh-to-age