diff --git a/.devtools/shell-allowlist.toml b/.devtools/shell-allowlist.toml
index 23738a6c..dca50ee2 100644
--- a/.devtools/shell-allowlist.toml
+++ b/.devtools/shell-allowlist.toml
@@ -82,6 +82,7 @@ commands = [
   "shell-allowlist",
   "ssh-sign",
   "test-hooks",
+  "testenv",
 
   # Coreutils (printf and test are also builtins above).
   "cat",