Fixes a resource leak introduced by #27069. - add defer - move sign code out of `repository.go`
noarch