diff --git a/docs/reference/secretref-credential-surface.md b/docs/reference/secretref-credential-surface.md
index 35b3b9f84cf..5b54e552f93 100644
--- a/docs/reference/secretref-credential-surface.md
+++ b/docs/reference/secretref-credential-surface.md
@@ -89,7 +89,8 @@ Scope intent:
 
 - `profiles.*.keyRef` (`type: "api_key"`)
 - `profiles.*.tokenRef` (`type: "token"`)
-  [//]: # (secretref-supported-list-end)
+
+[//]: # "secretref-supported-list-end"
 
 Notes:
 
@@ -116,7 +117,8 @@ Out-of-scope credentials include:
 - `auth-profiles.oauth.*`
 - `discord.threadBindings.*.webhookToken`
 - `whatsapp.creds.json`
-  [//]: # (secretref-unsupported-list-end)
+
+[//]: # "secretref-unsupported-list-end"
 
 Rationale:
 
diff --git a/src/secrets/target-registry.test.ts b/src/secrets/target-registry.test.ts
index 83edd0d51f5..cc536fd2eb3 100644
--- a/src/secrets/target-registry.test.ts
+++ b/src/secrets/target-registry.test.ts
@@ -58,12 +58,12 @@ describe("secret target registry", () => {
     };
 
     const supportedFromDocs = readMarkedCredentialList({
-      start: "[//]: # (secretref-supported-list-start)",
-      end: "[//]: # (secretref-supported-list-end)",
+      start: '[//]: # "secretref-supported-list-start"',
+      end: '[//]: # "secretref-supported-list-end"',
     });
     const unsupportedFromDocs = readMarkedCredentialList({
-      start: "[//]: # (secretref-unsupported-list-start)",
-      end: "[//]: # (secretref-unsupported-list-end)",
+      start: '[//]: # "secretref-unsupported-list-start"',
+      end: '[//]: # "secretref-unsupported-list-end"',
     });
 
     const supportedFromMatrix = new Set(