From 47af771a467de6400995be4ac1a8c205f7c301a2 Mon Sep 17 00:00:00 2001
From: Victor Fan <vsfan@google.com>
Date: Wed, 22 Jul 2026 15:19:14 -0700
Subject: [PATCH] fix bug breaking functions:secrets:prune

---
 src/functions/secrets.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/functions/secrets.ts b/src/functions/secrets.ts
index aa95be09a5c..2ff5ae8b8cf 100644
--- a/src/functions/secrets.ts
+++ b/src/functions/secrets.ts
@@ -238,7 +238,10 @@ export async function pruneSecrets(
   const prunedSecrets: Set<string> = new Set();
 
   // Collect all Firebase managed secret versions
-  const haveSecrets = await listSecrets(projectId, `labels.${FIREBASE_MANAGED}=true`);
+  const haveSecrets = await listSecrets(
+    projectId,
+    `labels.${FIREBASE_MANAGED}=true OR labels.${FIREBASE_MANAGED}=functions`,
+  );
   for (const secret of haveSecrets) {
     const versions = await listSecretVersions(projectId, secret.name, `NOT state: DESTROYED`);
     for (const version of versions) {