diff --git a/attestation/environment/sensitive_env_vars.go b/attestation/environment/sensitive_env_vars.go
index 50f6dd61..64f1ba24 100644
--- a/attestation/environment/sensitive_env_vars.go
+++ b/attestation/environment/sensitive_env_vars.go
@@ -21,11 +21,11 @@ func DefaultSensitiveEnvList() map[string]struct{} {
 	return map[string]struct{}{
 
 		// Glob pattern list
-		"*_TOKEN":    {},
-		"SECRET_*":   {},
-		"*_API_KEY":  {},
-		"*_PASSWORD": {},
-		"*_JWT":      {},
+		"*TOKEN*":    {},
+		"*SECRET*":   {},
+		"*API_KEY*":  {},
+		"*PASSWORD*": {},
+		"*JWT*":      {},
 
 		// Explicit list
 		"AWS_ACCESS_KEY_ID":              {},