From fcb990e36950f5db44e9bf4d39a9024c9cc75a9c Mon Sep 17 00:00:00 2001
From: Vincent Koc <vincentkoc@ieee.org>
Date: Sat, 7 Mar 2026 16:43:05 -0800
Subject: [PATCH] Node Host: allowlist password precedence labels

---
 src/node-host/runner.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/node-host/runner.ts b/src/node-host/runner.ts
index 13045d6bb5d..0378d9406ba 100644
--- a/src/node-host/runner.ts
+++ b/src/node-host/runner.ts
@@ -121,9 +121,9 @@ export async function resolveNodeHostGatewayCredentials(params: {
     env: params.env,
     includeLegacyEnv: false,
     localTokenPrecedence: "env-first",
-    localPasswordPrecedence: "env-first",
+    localPasswordPrecedence: "env-first", // pragma: allowlist secret
     remoteTokenPrecedence: "env-first",
-    remotePasswordPrecedence: "env-first",
+    remotePasswordPrecedence: "env-first", // pragma: allowlist secret
   });
 }