diff --git a/src/secrets/target-registry-query.ts b/src/secrets/target-registry-query.ts
index e9f700823693..a814af1ca939 100644
--- a/src/secrets/target-registry-query.ts
+++ b/src/secrets/target-registry-query.ts
@@ -444,6 +444,7 @@ export function discoverConfigSecretTargetsByIds(
     : null;
   const canUseConfiguredEntries =
     configuredEntries !== null &&
+    allowedTargetIds !== null &&
     Array.from(allowedTargetIds).every((targetId) => configuredEntriesById?.has(targetId));
   const registryState = canUseConfiguredEntries ? null : getCompiledSecretTargetRegistryState();
   const discoveryEntries = resolveDiscoveryEntries({