diff --git a/src/gateway/resolve-configured-secret-input-string.ts b/src/gateway/resolve-configured-secret-input-string.ts
index b16b89e83c2..9b3687b8844 100644
--- a/src/gateway/resolve-configured-secret-input-string.ts
+++ b/src/gateway/resolve-configured-secret-input-string.ts
@@ -4,7 +4,10 @@ import { secretRefKey } from "../secrets/ref-contract.js";
 import { resolveSecretRefValues } from "../secrets/resolve.js";
 
 export type SecretInputUnresolvedReasonStyle = "generic" | "detailed"; // pragma: allowlist secret
-export type ConfiguredSecretInputSource = "config" | "secretRef" | "fallback";
+export type ConfiguredSecretInputSource =
+  | "config"
+  | "secretRef" // pragma: allowlist secret
+  | "fallback";
 
 function trimToUndefined(value: unknown): string | undefined {
   if (typeof value !== "string") {