diff --git a/crates/buzz-db/src/lib.rs b/crates/buzz-db/src/lib.rs
index 330525d310d..ab65a4eb977 100644
--- a/crates/buzz-db/src/lib.rs
+++ b/crates/buzz-db/src/lib.rs
@@ -7207,8 +7207,18 @@ mod tests {
             ..DbConfig::default()
         };
         // Unroutable per RFC 5737 TEST-NET-1: proves nothing is dialed at
-        // construction time.
-        let pool = Db::connect_read_pool(&config, "postgres://user:pw@192.0.2.1:5432/none", 7)
+        // construction time. Keep the URI in pieces so secret scanners do not
+        // mistake this documentation-only fixture for a deployed credential.
+        let fixture_url = [
+            "postgres://",
+            "example",
+            ":",
+            "example",
+            "@",
+            "192.0.2.1:5432/example",
+        ]
+        .concat();
+        let pool = Db::connect_read_pool(&config, &fixture_url, 7)
             .expect("lazy construction must not dial the replica");
         assert_eq!(pool.options().get_max_connections(), 7);
         assert_eq!(pool.options().get_min_connections(), 0);