diff --git a/src/cmd/getM365/onedrive/get_item.go b/src/cmd/getM365/onedrive/get_item.go
index 3b338ca74..9e16ee746 100644
--- a/src/cmd/getM365/onedrive/get_item.go
+++ b/src/cmd/getM365/onedrive/get_item.go
@@ -198,6 +198,7 @@ func getDriveItemContent(
 	if err != nil {
 		return nil, clues.New("downloading item").With("error", err)
 	}
+	defer resp.Body.Close()
 
 	content, err := io.ReadAll(resp.Body)
 	if err != nil {
diff --git a/src/internal/connector/graph/concurrency_middleware_test.go b/src/internal/connector/graph/concurrency_middleware_test.go
index 4e7e57606..c5734a665 100644
--- a/src/internal/connector/graph/concurrency_middleware_test.go
+++ b/src/internal/connector/graph/concurrency_middleware_test.go
@@ -62,6 +62,9 @@ func (suite *ConcurrencyLimiterUnitTestSuite) TestConcurrencyLimiter() {
 
 			resp, err := client.Get(ts.URL)
 			require.NoError(t, err)
+
+			defer resp.Body.Close()
+
 			assert.Equal(t, http.StatusOK, resp.StatusCode)
 		}()
 	}
diff --git a/src/internal/connector/graph/http_wrapper_test.go b/src/internal/connector/graph/http_wrapper_test.go
index 40abea977..92348736c 100644
--- a/src/internal/connector/graph/http_wrapper_test.go
+++ b/src/internal/connector/graph/http_wrapper_test.go
@@ -40,8 +40,10 @@ func (suite *HTTPWrapperIntgSuite) TestNewHTTPWrapper() {
 		"https://www.corsobackup.io",
 		nil,
 		nil)
-
 	require.NoError(t, err, clues.ToCore(err))
+
+	defer resp.Body.Close()
+
 	require.NotNil(t, resp)
 	require.Equal(t, http.StatusOK, resp.StatusCode)
 }
@@ -108,8 +110,10 @@ func (suite *HTTPWrapperUnitSuite) TestNewHTTPWrapper_redirectMiddleware() {
 	hw := NewHTTPWrapper(appendMiddleware(&mwResp))
 
 	resp, err := hw.Request(ctx, http.MethodGet, url, nil, nil)
-
 	require.NoError(t, err, clues.ToCore(err))
+
+	defer resp.Body.Close()
+
 	require.NotNil(t, resp)
 	// require.Equal(t, 1, calledCorrectly, "test server was called with expected path")
 	require.Equal(t, http.StatusOK, resp.StatusCode)