diff --git a/src/pkg/registry/auth/authorizer.go b/src/pkg/registry/auth/authorizer.go
index 756a51372..af61fea4a 100644
--- a/src/pkg/registry/auth/authorizer.go
+++ b/src/pkg/registry/auth/authorizer.go
@@ -86,6 +86,7 @@ func (a *authorizer) initialize(u *url.URL) error {
 	if err != nil {
 		return err
 	}
+	defer resp.Body.Close()
 
 	challenges := challenge.ResponseChallenges(resp)
 	// no challenge, mean no auth