diff --git a/.pick_status.json b/.pick_status.json
index 6c88cc4882e..e32bc4cfadd 100644
--- a/.pick_status.json
+++ b/.pick_status.json
@@ -94,7 +94,7 @@
         "description": "vulkan: Use secure_getenv for trigger files",
         "nominated": true,
         "nomination_type": 0,
-        "resolution": 0,
+        "resolution": 1,
         "main_sha": null,
         "because_sha": null,
         "notes": null
diff --git a/src/vulkan/runtime/vk_instance.c b/src/vulkan/runtime/vk_instance.c
index 31dc8b1ff69..f375c16f365 100644
--- a/src/vulkan/runtime/vk_instance.c
+++ b/src/vulkan/runtime/vk_instance.c
@@ -197,7 +197,7 @@ vk_instance_init(struct vk_instance *instance,
 
    instance->trace_mode = parse_debug_string(getenv("MESA_VK_TRACE"), trace_options);
    instance->trace_frame = (uint32_t)debug_get_num_option("MESA_VK_TRACE_FRAME", 0xFFFFFFFF);
-   instance->trace_trigger_file = getenv("MESA_VK_TRACE_TRIGGER");
+   instance->trace_trigger_file = secure_getenv("MESA_VK_TRACE_TRIGGER");
 
    vk_compiler_cache_init();