diff --git a/src/commands/gateway-status.test.ts b/src/commands/gateway-status.test.ts
index bf9242eab86..be6f85d63f1 100644
--- a/src/commands/gateway-status.test.ts
+++ b/src/commands/gateway-status.test.ts
@@ -149,7 +149,7 @@ function makeRemoteGatewayConfig(url: string, token = "rtok", localToken = "ltok
   };
 }
 
-function mockLocalTokenEnvRefConfig(envTokenId = "MISSING_GATEWAY_TOKEN") {
+function mockLocalTokenEnvRefConfig(envTokenId = "MISSING_GATEWAY_TOKEN") { // pragma: allowlist secret
   loadConfig.mockReturnValueOnce({
     secrets: {
       providers: {