diff --git a/src/ukify/ukify.py b/src/ukify/ukify.py
index e78c6119cbe..8d122aaa425 100755
--- a/src/ukify/ukify.py
+++ b/src/ukify/ukify.py
@@ -504,7 +504,7 @@ def combine_signatures(pcrsigs: list[dict[str, str]]) -> str:
     return json.dumps(combined)
 
 
-def key_path_groups(opts: argparse.Namespace) -> Iterator:
+def key_path_groups(opts: argparse.Namespace) -> Iterator[tuple[str, Optional[Path], Optional[str]]]:
     if not opts.pcr_private_keys:
         return