False Positive when http.Response from a function

[xxf0512]

The following code triggers a false positive.

package main

import (
	"net/http"
	"tmp"
)

type MyResp struct {
	resp *http.Response
}

func (r *MyResp) Response() *http.Response {
	return r.resp
}

func test() {
	tmp := &MyResp{}
	var err error
	tmp.resp, err = http.Get("http://example.com/")
	if err != nil {
		fmt.Println(err)
	}
	defer tmp.Response().Body.Close()
	body, _ := ioutil.ReadAll(tmp.Response().Body)
	fmt.Println(body)
}

func main() {
        test()
}

[adamroyjones]

I came here to report a similar example. With

package main

import (
	"fmt"
	"io"
	"net/http"
)

func id[T any](r T) T { return r }

func main() {
	resp, err := http.Get("http://localhost:8008")
	if err != nil {
		panic(err)
	}

	resp = id(resp)
	defer resp.Body.Close()

	bs, err := io.ReadAll(resp.Body)
	if err != nil {
		panic(err)
	}

	fmt.Printf("%s", bs)
}

I find that

go vet -vettool=$(which bodyclose) ./...

prints out

# falsepositive
./main.go:12:23: response body must be closed

(This is not sensitive to the use of generics.)

[Integralist]

I've just stumbled across this issue and it seems there's been a few other cases like this reported over the last year+ and no response from the author of the repo. Is it safe to presume this tool has been abandoned?