diff --git a/services/orchestrator/tests/test_residual_authz.py b/services/orchestrator/tests/test_residual_authz.py
index b001df5..e7782be 100644
--- a/services/orchestrator/tests/test_residual_authz.py
+++ b/services/orchestrator/tests/test_residual_authz.py
@@ -31,7 +31,7 @@
 import pytest
 
 # Configure verification material BEFORE importing auth so it runs fail-closed.
-os.environ["JWT_SECRET"] = "test-secret-for-issue-6-authz"
+os.environ["JWT_SECRET"] = "test-secret-for-issue-6-authz"  # nosec B105
 os.environ["JWT_ALGORITHM"] = "HS256"
 os.environ.pop("AUTH_DISABLED", None)
 os.environ.pop("JWT_AUDIENCE", None)