diff --git a/src/shared/creds-util.c b/src/shared/creds-util.c
index e7db1ff7ef..6fedc500dc 100644
--- a/src/shared/creds-util.c
+++ b/src/shared/creds-util.c
@@ -1068,6 +1068,8 @@ int encrypt_credential_and_warn(
                 ALIGN8(offsetof(struct metadata_credential_header, name) + strlen_ptr(name)) +
                 input->iov_len + 2U * (size_t) bsz +
                 tsz;
+        /* Silence static analyzers */
+        assert(output.iov_len >= input->iov_len);
 
         output.iov_base = malloc0(output.iov_len);
         if (!output.iov_base)