diff --git a/src/lib/credential-invariant.test.ts b/src/lib/credential-invariant.test.ts
index 2ad867c..a575e75 100644
--- a/src/lib/credential-invariant.test.ts
+++ b/src/lib/credential-invariant.test.ts
@@ -226,7 +226,7 @@ describe("scanner-to-boundary credential invariant", () => {
         "SELECT file, message, code_snippet, fingerprint, suppressed_reason, llm_explanation, llm_fix, created_at FROM findings WHERE id = ?",
       ).get(legacyId)), value).not.toContain(value);
     }
-  });
+  }, { timeout: 30_000 });
 
   test("safe noncredentials remain unchanged", () => {
     const safeValues = [