diff --git a/internal/lang/funcs/crypto.go b/internal/lang/funcs/crypto.go
index f785a7f3b..7c4ba4ada 100644
--- a/internal/lang/funcs/crypto.go
+++ b/internal/lang/funcs/crypto.go
@@ -248,6 +248,7 @@ func makeFileHashFunction(baseDir string, hf func() hash.Hash, enc func([]byte)
 			if err != nil {
 				return cty.UnknownVal(cty.String), err
 			}
+			defer f.Close()
 
 			h := hf()
 			_, err = io.Copy(h, f)
diff --git a/internal/lang/funcs/filesystem.go b/internal/lang/funcs/filesystem.go
index fb0db7e53..846b86110 100644
--- a/internal/lang/funcs/filesystem.go
+++ b/internal/lang/funcs/filesystem.go
@@ -377,6 +377,7 @@ func readFileBytes(baseDir, path string) ([]byte, error) {
 		}
 		return nil, err
 	}
+	defer f.Close()
 
 	src, err := ioutil.ReadAll(f)
 	if err != nil {