diff --git a/module/services/accounts/code/pkg/adapters/rpc_policy_denied_test.go b/module/services/accounts/code/pkg/adapters/rpc_policy_denied_test.go
index d1c781efd..63a9881a5 100644
--- a/module/services/accounts/code/pkg/adapters/rpc_policy_denied_test.go
+++ b/module/services/accounts/code/pkg/adapters/rpc_policy_denied_test.go
@@ -92,7 +92,7 @@ func TestUnauthenticatedCentralRefusalIsCounted(t *testing.T) {
 	reader := deniedReader(t)
 	refusal := membershipLookupStatus("verify central org scope", auth.ErrVerifiedDatabaseIdentityRequired)
 	require.Equal(t, codes.Unauthenticated, status.Code(refusal))
-	recordPolicyDenial(context.Background(), deniedMethod, denialReasonCentral, refusal)
+	require.Equal(t, refusal, recordPolicyDenial(context.Background(), deniedMethod, denialReasonCentral, refusal))
 	require.Equal(t, int64(1), deniedPoints(t, reader)[deniedMethod+" "+denialReasonCentral])
 }
 
diff --git a/module/services/store/code/migration_65_scope_settings_test.go b/module/services/store/code/migration_65_scope_settings_test.go
index 7f904bb24..50675a363 100644
--- a/module/services/store/code/migration_65_scope_settings_test.go
+++ b/module/services/store/code/migration_65_scope_settings_test.go
@@ -90,7 +90,7 @@ func TestMigration65RenamesEveryScopeSettingAndNothingElse(t *testing.T) {
 	if err != nil {
 		t.Fatal(err)
 	}
-	defer runner.Close()
+	defer func() { _, _ = runner.Close() }()
 	if err := runner.Steps(-1); err != nil {
 		t.Fatal(err)
 	}
@@ -161,7 +161,7 @@ SELECT line FROM (
 	if err != nil {
 		t.Fatal(err)
 	}
-	defer rows.Close()
+	defer func() { _ = rows.Close() }()
 	var out []string
 	for rows.Next() {
 		var line string