diff --git a/src/pkg/scan/export/digest_calculator.go b/src/pkg/scan/export/digest_calculator.go
index 5c3d50d22..a5f46f2be 100644
--- a/src/pkg/scan/export/digest_calculator.go
+++ b/src/pkg/scan/export/digest_calculator.go
@@ -35,6 +35,7 @@ func (calc *SHA256ArtifactDigestCalculator) Calculate(fileName string) (digest.D
 	if err != nil {
 		return "", err
 	}
+	defer file.Close()
 	hash := sha256.New()
 	if _, err := io.Copy(hash, file); err != nil {
 		return "", err