diff --git a/pkg/serviceaccount/util_test.go b/pkg/serviceaccount/util_test.go
index 88888e2e44..75db30cf48 100644
--- a/pkg/serviceaccount/util_test.go
+++ b/pkg/serviceaccount/util_test.go
@@ -44,6 +44,20 @@ func TestIsServiceAccountToken(t *testing.T) {
 		},
 	}
 
+	secretTypeMistmatch := &v1.Secret{
+		ObjectMeta: metav1.ObjectMeta{
+			Name:            "token-secret-2",
+			Namespace:       "default",
+			UID:             "23456",
+			ResourceVersion: "1",
+			Annotations: map[string]string{
+				v1.ServiceAccountNameKey: "default",
+				v1.ServiceAccountUIDKey:  "12345",
+			},
+		},
+		Type: v1.SecretTypeOpaque,
+	}
+
 	saIns := &v1.ServiceAccount{
 		ObjectMeta: metav1.ObjectMeta{
 			Name:            "default",
@@ -91,6 +105,11 @@ func TestIsServiceAccountToken(t *testing.T) {
 			sa:     saInsUIDNotEqual,
 			expect: false,
 		},
+		"service account type not equal": {
+			secret: secretTypeMistmatch,
+			sa:     saIns,
+			expect: false,
+		},
 	}
 
 	for k, v := range tests {