diff --git a/pkg/helmexec/exec.go b/pkg/helmexec/exec.go
index c839f397..ca39c305 100644
--- a/pkg/helmexec/exec.go
+++ b/pkg/helmexec/exec.go
@@ -326,6 +326,7 @@ func (helm *execer) DecryptSecret(context HelmContext, name string, flags ...str
 			if err != nil {
 				return "", err
 			}
+			defer tmpFile.Close()
 
 			_, err = tmpFile.Write(content)
 			if err != nil {