diff --git a/src/cmd/root.go b/src/cmd/root.go
index d1a2871..ac89a38 100644
--- a/src/cmd/root.go
+++ b/src/cmd/root.go
@@ -404,6 +404,8 @@ func validateSubIDFile(path string) (bool, error) {
 		return false, fmt.Errorf("failed to open: %w", err)
 	}
 
+	defer file.Close()
+
 	scanner := bufio.NewScanner(file)
 	scanner.Split(bufio.ScanLines)