diff --git a/tests/unit/test_secrets_config_repr.py b/tests/unit/test_secrets_config_repr.py
index 75d2a2b1..4ca74cc1 100644
--- a/tests/unit/test_secrets_config_repr.py
+++ b/tests/unit/test_secrets_config_repr.py
@@ -42,8 +42,8 @@ def test_aws_config_secret_access_key_redacted():
 def test_azure_config_client_secret_redacted():
     cfg = AzureConfig(vault_url="https://kv.azure.net/", client_secret=SECRET)
     assert SECRET not in repr(cfg)
-    # Substring check on repr() output, not a host allow-list.
-    assert "kv.azure.net" in repr(cfg)
+    # The vault URL is not a credential, so the repr still shows it.
+    assert f"vault_url={cfg.vault_url!r}" in repr(cfg)
 
 
 def test_gcp_config_unchanged():