diff --git a/cmd/flux/create_source_git.go b/cmd/flux/create_source_git.go
index 8de87e926e45af5be3bf6b44ec378bc7f007f3db..b864132f21f3b021b36cee1d1ca374249f179e44 100644
--- a/cmd/flux/create_source_git.go
+++ b/cmd/flux/create_source_git.go
@@ -241,6 +241,7 @@ func createSourceGitCmdRun(cmd *cobra.Command, args []string) error {
 			secretOpts.Password = sourceGitArgs.password
 			secretOpts.CAFilePath = sourceGitArgs.caFile
 		case "http":
+			logger.Warningf("insecure configuration: credentials configured for an HTTP URL")
 			secretOpts.Username = sourceGitArgs.username
 			secretOpts.Password = sourceGitArgs.password
 		}
diff --git a/cmd/flux/log.go b/cmd/flux/log.go
index d8b25b22b769b248018b8e87d8427d2791b3b1b4..8343fce77c00d67e7b85ab87f741a82462d53dbb 100644
--- a/cmd/flux/log.go
+++ b/cmd/flux/log.go
@@ -41,6 +41,10 @@ func (l stderrLogger) Successf(format string, a ...interface{}) {
 	fmt.Fprintln(l.stderr, `✔`, fmt.Sprintf(format, a...))
 }
 
+func (l stderrLogger) Warningf(format string, a ...interface{}) {
+	fmt.Fprintln(l.stderr, `⚠️`, fmt.Sprintf(format, a...))
+}
+
 func (l stderrLogger) Failuref(format string, a ...interface{}) {
 	fmt.Fprintln(l.stderr, `✗`, fmt.Sprintf(format, a...))
 }
diff --git a/pkg/log/log.go b/pkg/log/log.go
index 2833e077b83e7e314e85d9123ff4a44996510062..63b99a4962cedb28c9375ff2e1ce9b3ddcdd18a0 100644
--- a/pkg/log/log.go
+++ b/pkg/log/log.go
@@ -24,6 +24,8 @@ type Logger interface {
 	Waitingf(format string, a ...interface{})
 	// Successf logs a formatted success message.
 	Successf(format string, a ...interface{})
+	// Warningf logs a formatted warning message.
+	Warningf(format string, a ...interface{})
 	// Failuref logs a formatted failure message.
 	Failuref(format string, a ...interface{})
 }