diff --git a/sdk/typescript/tests-ts/import-scan.test.ts b/sdk/typescript/tests-ts/import-scan.test.ts
index 5b8ccab53..6fd503d77 100644
--- a/sdk/typescript/tests-ts/import-scan.test.ts
+++ b/sdk/typescript/tests-ts/import-scan.test.ts
@@ -564,6 +564,19 @@ for (const dryRun of [false, true]) {
       },
     ],
     ["duplicate evidence ID", { codeEvidence: [evidence, evidence] }],
+    [
+      "unsafe secondary location",
+      {
+        locations: [
+          { path: "src/extract.ts", startLine: 41 },
+          { path: "../outside.ts", startLine: 1 },
+        ],
+      },
+    ],
+    [
+      "unsafe evidence path",
+      { codeEvidence: [{ ...evidence, path: "../outside.ts" }] },
+    ],
   ] as const)(
     `rejects %s before import persistence (dryRun: ${dryRun})`,
     async (_name, details) => {