diff --git a/tests/test_organization_commercial_readiness_loop_receipt_contract.py b/tests/test_organization_commercial_readiness_loop_receipt_contract.py
index 6ae9dfa595..0a7bde07a4 100644
--- a/tests/test_organization_commercial_readiness_loop_receipt_contract.py
+++ b/tests/test_organization_commercial_readiness_loop_receipt_contract.py
@@ -57,7 +57,9 @@ def test_json_receipt_is_retained_as_an_immutable_short_lived_artifact() -> None
     assert "if-no-files-found: error" in source
     assert "retention-days: 3" in source
     endpoints = _harden_runner_allowed_endpoints(source)
-    assert "results-receiver.actions.githubusercontent.com:443" in endpoints
-    assert "*.actions.githubusercontent.com:443" in endpoints
-    assert "*.blob.core.windows.net:443" in endpoints
+    assert {
+        "results-receiver.actions.githubusercontent.com:443",
+        "*.actions.githubusercontent.com:443",
+        "*.blob.core.windows.net:443",
+    }.issubset(endpoints)
     assert "- name: Checkout exact trusted coordinator source" not in endpoints