diff --git a/test/per_file_coverage.sh b/test/per_file_coverage.sh
index a3856e04f9a0d..140ab7714a325 100755
--- a/test/per_file_coverage.sh
+++ b/test/per_file_coverage.sh
@@ -6,22 +6,25 @@ declare -a KNOWN_LOW_COVERAGE=(
 "source/common/network:94.0"
 "source/common/http/http3:50.0"
 "source/common/tracing:94.9"
-"source/common/protobuf:94.9"
+"source/common/protobuf:94.3"
 "source/common/secret:95.2"
 "source/common/singleton:95.1"
-"source/common/api:92.1"
-"source/common/api/posix:92.1"
+"source/common/api:72.9"
+"source/common/api/posix:71.8"
+"source/common/init:96.2"
 "source/common/json:90.6"
 "source/common/filesystem:96.1"
 "source/common/filesystem/posix:93.7"
 "source/common/thread_local:95.7"
 "source/common/crypto:0.0"
+"source/common/common:96.1"
 "source/common/common/posix:94.1"
 "source/common/signal:85.1"
 "source/exe:93.7"
 "source/extensions:96.3"
 "source/extensions/common:94.4"
 "source/extensions/common/crypto:91.5"
+"source/extensions/common/tap:95.1"
 "source/extensions/common/wasm:85.4"
 "source/extensions/common/wasm/v8:85.4"
 "source/extensions/common/wasm/null:77.8"
@@ -32,10 +35,13 @@ declare -a KNOWN_LOW_COVERAGE=(
 "source/extensions/filters/network/mongo_proxy:94.0"
 "source/extensions/filters/network/common:96.1"
 "source/extensions/filters/network/common/redis:96.2"
+"source/extensions/filters/network/http_connection_manager:95.4"
 "source/extensions/filters/http/cache:80.7"
 "source/extensions/filters/http/cache/simple_http_cache:84.5"
+"source/extensions/filters/http/dynamic_forward_proxy:94.9"
 "source/extensions/filters/http/ip_tagging:91.2"
 "source/extensions/filters/http/grpc_json_transcoder:93.3"
+"source/extensions/filters/http/oauth2:96.5"
 "source/extensions/filters/listener:96.0"
 "source/extensions/filters/listener/tls_inspector:92.4"
 "source/extensions/filters/listener/http_inspector:93.3"
@@ -43,8 +49,8 @@ declare -a KNOWN_LOW_COVERAGE=(
 "source/extensions/filters/udp/dns_filter:89.2"
 "source/extensions/filters/common:94.7"
 "source/extensions/filters/common/expr:92.2"
-"source/extensions/filters/common/rbac:87.2"
-"source/extensions/filters/common/fault:95.8"
+"source/extensions/filters/common/rbac:87.1"
+"source/extensions/filters/common/fault:94.3"
 "source/extensions/filters/common/lua:95.9"
 "source/extensions/grpc_credentials:92.0"
 "source/extensions/health_checkers:95.9"
@@ -52,15 +58,19 @@ declare -a KNOWN_LOW_COVERAGE=(
 "source/extensions/quic_listeners:84.8"
 "source/extensions/quic_listeners/quiche:84.8"
 "source/extensions/stat_sinks/statsd:85.2"
+"source/extensions/tracers:96.0"
 "source/extensions/tracers/opencensus:91.2"
-"source/extensions/tracers/xray:95.3"
+"source/extensions/tracers/xray:94.0"
 "source/extensions/transport_sockets:94.9"
 "source/extensions/transport_sockets/tap:95.6"
 "source/extensions/transport_sockets/tls:94.2"
+"source/extensions/transport_sockets/tls/ocsp:95.3"
 "source/extensions/transport_sockets/tls/private_key:76.9"
+"source/extensions/watchdog:84.9"
+"source/extensions/watchdog/profile_action:84.9"
 "source/server:94.7"
-"source/server/config_validation:77.2"
-"source/server/admin:95.6"
+"source/server/config_validation:76.8"
+"source/server/admin:95.5"
 )
 
 [[ -z "${SRCDIR}" ]] && SRCDIR="${PWD}"
diff --git a/test/run_envoy_bazel_coverage.sh b/test/run_envoy_bazel_coverage.sh
index 7bf6cc92e36e2..dbcfd46aedd2d 100755
--- a/test/run_envoy_bazel_coverage.sh
+++ b/test/run_envoy_bazel_coverage.sh
@@ -71,7 +71,7 @@ fi
 
 # We want to allow per_file_coverage to fail without exiting this script.
 set +e
-if [[ "$VALIDATE_COVERAGE" == "true" ]] && [[ "{FUZZ_COVERAGE}" == "false" ]]; then
+if [[ "$VALIDATE_COVERAGE" == "true" ]] && [[ "${FUZZ_COVERAGE}" == "false" ]]; then
   echo "Checking per-extension coverage"
   output=$(./test/per_file_coverage.sh)