diff --git a/agent/agent_test.go b/agent/agent_test.go
index 1f049f08b65f9..8ee15e563f3ce 100644
--- a/agent/agent_test.go
+++ b/agent/agent_test.go
@@ -130,7 +130,6 @@ func TestAgent_Stats_SSH(t *testing.T) {
 	t.Parallel()
 
 	for _, port := range sshPorts {
-		port := port
 		t.Run(fmt.Sprintf("(:%d)", port), func(t *testing.T) {
 			t.Parallel()
 
@@ -342,7 +341,6 @@ func TestAgent_SessionExec(t *testing.T) {
 	t.Parallel()
 
 	for _, port := range sshPorts {
-		port := port
 		t.Run(fmt.Sprintf("(:%d)", port), func(t *testing.T) {
 			t.Parallel()
 
@@ -468,7 +466,6 @@ func TestAgent_SessionTTYShell(t *testing.T) {
 	}
 
 	for _, port := range sshPorts {
-		port := port
 		t.Run(fmt.Sprintf("(%d)", port), func(t *testing.T) {
 			t.Parallel()
 
@@ -611,7 +608,6 @@ func TestAgent_Session_TTY_MOTD(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.name, func(t *testing.T) {
 			t.Parallel()
 			session := setupSSHSession(t, test.manifest, test.banner, func(fs afero.Fs) {
@@ -688,8 +684,6 @@ func TestAgent_Session_TTY_MOTD_Update(t *testing.T) {
 
 	//nolint:paralleltest // These tests need to swap the banner func.
 	for _, port := range sshPorts {
-		port := port
-
 		sshClient, err := conn.SSHClientOnPort(ctx, port)
 		require.NoError(t, err)
 		t.Cleanup(func() {
@@ -697,7 +691,6 @@ func TestAgent_Session_TTY_MOTD_Update(t *testing.T) {
 		})
 
 		for i, test := range tests {
-			test := test
 			t.Run(fmt.Sprintf("(:%d)/%d", port, i), func(t *testing.T) {
 				// Set new banner func and wait for the agent to call it to update the
 				// banner.
@@ -1210,7 +1203,6 @@ func TestAgent_CoderEnvVars(t *testing.T) {
 	t.Parallel()
 
 	for _, key := range []string{"CODER", "CODER_WORKSPACE_NAME", "CODER_WORKSPACE_OWNER_NAME", "CODER_WORKSPACE_AGENT_NAME"} {
-		key := key
 		t.Run(key, func(t *testing.T) {
 			t.Parallel()
 
@@ -1233,7 +1225,6 @@ func TestAgent_SSHConnectionEnvVars(t *testing.T) {
 	// For some reason this test produces a TTY locally and a non-TTY in CI
 	// so we don't test for the absence of SSH_TTY.
 	for _, key := range []string{"SSH_CONNECTION", "SSH_CLIENT"} {
-		key := key
 		t.Run(key, func(t *testing.T) {
 			t.Parallel()
 
@@ -1276,7 +1267,6 @@ func TestAgent_SSHConnectionLoginVars(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.key, func(t *testing.T) {
 			t.Parallel()
 
@@ -1796,7 +1786,6 @@ func TestAgent_ReconnectingPTY(t *testing.T) {
 	t.Setenv("LANG", "C")
 
 	for _, backendType := range backends {
-		backendType := backendType
 		t.Run(backendType, func(t *testing.T) {
 			if backendType == "Screen" {
 				if runtime.GOOS != "linux" {
@@ -2496,7 +2485,6 @@ func TestAgent_Dial(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/agent/agentcontainers/containers_internal_test.go b/agent/agentcontainers/containers_internal_test.go
index eeb6a5d0374d1..a60dec75cd845 100644
--- a/agent/agentcontainers/containers_internal_test.go
+++ b/agent/agentcontainers/containers_internal_test.go
@@ -41,7 +41,6 @@ func TestWrapDockerExec(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt // appease the linter even though this isn't needed anymore
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			actualCmd, actualArgs := wrapDockerExec("my-container", tt.containerUser, tt.cmdArgs[0], tt.cmdArgs[1:]...)
@@ -54,7 +53,6 @@ func TestWrapDockerExec(t *testing.T) {
 func TestConvertDockerPort(t *testing.T) {
 	t.Parallel()
 
-	//nolint:paralleltest // variable recapture no longer required
 	for _, tc := range []struct {
 		name          string
 		in            string
@@ -101,7 +99,6 @@ func TestConvertDockerPort(t *testing.T) {
 			expectError: "invalid port",
 		},
 	} {
-		//nolint: paralleltest // variable recapture no longer required
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			actualPort, actualNetwork, actualErr := convertDockerPort(tc.in)
@@ -151,7 +148,6 @@ func TestConvertDockerVolume(t *testing.T) {
 			expectError: "invalid volume",
 		},
 	} {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 		})
diff --git a/agent/agentssh/x11_internal_test.go b/agent/agentssh/x11_internal_test.go
index fdc3c04668663..f49242eb9f730 100644
--- a/agent/agentssh/x11_internal_test.go
+++ b/agent/agentssh/x11_internal_test.go
@@ -228,7 +228,6 @@ func Test_addXauthEntry(t *testing.T) {
 	require.NoError(t, err)
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/agent/proto/compare_test.go b/agent/proto/compare_test.go
index 3c5bdbf93a9e1..1e2645c59d5bc 100644
--- a/agent/proto/compare_test.go
+++ b/agent/proto/compare_test.go
@@ -67,7 +67,6 @@ func TestLabelsEqual(t *testing.T) {
 			eq: false,
 		},
 	} {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			require.Equal(t, tc.eq, proto.LabelsEqual(tc.a, tc.b))
diff --git a/agent/proto/resourcesmonitor/queue_test.go b/agent/proto/resourcesmonitor/queue_test.go
index a3a8fbc0d0a3a..770cf9e732ac7 100644
--- a/agent/proto/resourcesmonitor/queue_test.go
+++ b/agent/proto/resourcesmonitor/queue_test.go
@@ -65,8 +65,6 @@ func TestResourceMonitorQueue(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			queue := resourcesmonitor.NewQueue(20)
diff --git a/agent/proto/resourcesmonitor/resources_monitor_test.go b/agent/proto/resourcesmonitor/resources_monitor_test.go
index ddf3522ecea30..da8ffef293903 100644
--- a/agent/proto/resourcesmonitor/resources_monitor_test.go
+++ b/agent/proto/resourcesmonitor/resources_monitor_test.go
@@ -195,7 +195,6 @@ func TestPushResourcesMonitoringWithConfig(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/apiversion/apiversion_test.go b/apiversion/apiversion_test.go
index 8a18a0bd5ca8e..dfe80bdb731a5 100644
--- a/apiversion/apiversion_test.go
+++ b/apiversion/apiversion_test.go
@@ -72,7 +72,6 @@ func TestAPIVersionValidate(t *testing.T) {
 			expectedError: "no longer supported",
 		},
 	} {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/buildinfo/buildinfo_test.go b/buildinfo/buildinfo_test.go
index b83c106148e9e..ac9f5cd4dee83 100644
--- a/buildinfo/buildinfo_test.go
+++ b/buildinfo/buildinfo_test.go
@@ -93,7 +93,6 @@ func TestBuildInfo(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
 			t.Run(c.name, func(t *testing.T) {
 				t.Parallel()
 				require.Equal(t, c.expectMatch, buildinfo.VersionsMatch(c.v1, c.v2),
diff --git a/cli/agent_internal_test.go b/cli/agent_internal_test.go
index 910effb4191c1..02d65baaf623c 100644
--- a/cli/agent_internal_test.go
+++ b/cli/agent_internal_test.go
@@ -54,7 +54,6 @@ func Test_extractPort(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			got, err := extractPort(tt.urlString)
diff --git a/cli/autoupdate_test.go b/cli/autoupdate_test.go
index 51001d5109755..84647b0553d1c 100644
--- a/cli/autoupdate_test.go
+++ b/cli/autoupdate_test.go
@@ -62,7 +62,6 @@ func TestAutoUpdate(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
 			t.Run(c.Name, func(t *testing.T) {
 				t.Parallel()
 				client := coderdtest.New(t, nil)
diff --git a/cli/clitest/golden.go b/cli/clitest/golden.go
index d4401d6c5d5f9..fd44b523b9c9f 100644
--- a/cli/clitest/golden.go
+++ b/cli/clitest/golden.go
@@ -71,7 +71,6 @@ ExtractCommandPathsLoop:
 	}
 
 	for _, tt := range cases {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitLong)
diff --git a/cli/cliui/agent_test.go b/cli/cliui/agent_test.go
index 966d53578780a..7c3b71a204c3d 100644
--- a/cli/cliui/agent_test.go
+++ b/cli/cliui/agent_test.go
@@ -369,7 +369,6 @@ func TestAgent(t *testing.T) {
 			wantErr: true,
 		},
 	} {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -648,7 +647,6 @@ func TestPeerDiagnostics(t *testing.T) {
 		},
 	}
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			r, w := io.Pipe()
@@ -852,7 +850,6 @@ func TestConnDiagnostics(t *testing.T) {
 		},
 	}
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			r, w := io.Pipe()
diff --git a/cli/cliui/provisionerjob_test.go b/cli/cliui/provisionerjob_test.go
index aa31c9b4a40cb..77310e9536321 100644
--- a/cli/cliui/provisionerjob_test.go
+++ b/cli/cliui/provisionerjob_test.go
@@ -124,8 +124,6 @@ func TestProvisionerJob(t *testing.T) {
 		}
 
 		for _, tc := range tests {
-			tc := tc
-
 			t.Run(tc.name, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/cli/cliui/resources_internal_test.go b/cli/cliui/resources_internal_test.go
index 0c76e18eb1d1f..934322b5e9fb9 100644
--- a/cli/cliui/resources_internal_test.go
+++ b/cli/cliui/resources_internal_test.go
@@ -40,7 +40,6 @@ func TestRenderAgentVersion(t *testing.T) {
 		},
 	}
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.name, func(t *testing.T) {
 			t.Parallel()
 			actual := renderAgentVersion(testCase.agentVersion, testCase.serverVersion)
diff --git a/cli/cliui/table_test.go b/cli/cliui/table_test.go
index 671002d713fcf..4e82707f3fec8 100644
--- a/cli/cliui/table_test.go
+++ b/cli/cliui/table_test.go
@@ -169,7 +169,6 @@ foo   <nil>      10  [a, b, c]  foo1               11  foo2        12         fo
 		// Test with pointer values.
 		inPtr := make([]*tableTest1, len(in))
 		for i, v := range in {
-			v := v
 			inPtr[i] = &v
 		}
 		out, err = cliui.DisplayTable(inPtr, "", nil)
diff --git a/cli/cliutil/levenshtein/levenshtein_test.go b/cli/cliutil/levenshtein/levenshtein_test.go
index c635ad0564181..a210dd9253434 100644
--- a/cli/cliutil/levenshtein/levenshtein_test.go
+++ b/cli/cliutil/levenshtein/levenshtein_test.go
@@ -95,7 +95,6 @@ func Test_Levenshtein_Matches(t *testing.T) {
 			Expected:    []string{"kubernetes"},
 		},
 	} {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 			actual := levenshtein.Matches(tt.Needle, tt.MaxDistance, tt.Haystack...)
@@ -179,7 +178,6 @@ func Test_Levenshtein_Distance(t *testing.T) {
 			Error:   levenshtein.ErrMaxDist.Error(),
 		},
 	} {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 			actual, err := levenshtein.Distance(tt.A, tt.B, tt.MaxDist)
diff --git a/cli/cliutil/provisionerwarn_test.go b/cli/cliutil/provisionerwarn_test.go
index a737223310d75..878f08f822330 100644
--- a/cli/cliutil/provisionerwarn_test.go
+++ b/cli/cliutil/provisionerwarn_test.go
@@ -59,7 +59,6 @@ func TestWarnMatchedProvisioners(t *testing.T) {
 			},
 		},
 	} {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			var w strings.Builder
diff --git a/cli/configssh_internal_test.go b/cli/configssh_internal_test.go
index acf534e7ae157..0ddfedf077fbb 100644
--- a/cli/configssh_internal_test.go
+++ b/cli/configssh_internal_test.go
@@ -118,7 +118,6 @@ func Test_sshConfigSplitOnCoderSection(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -157,7 +156,6 @@ func Test_sshConfigProxyCommandEscape(t *testing.T) {
 	}
 	// nolint:paralleltest // Fixes a flake
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			if runtime.GOOS == "windows" {
 				t.Skip("Windows doesn't typically execute via /bin/sh or cmd.exe, so this test is not applicable.")
@@ -207,7 +205,6 @@ func Test_sshConfigMatchExecEscape(t *testing.T) {
 	}
 	// nolint:paralleltest // Fixes a flake
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			cmd := "/bin/sh"
 			arg := "-c"
@@ -290,7 +287,6 @@ func Test_sshConfigExecEscapeSeparatorForce(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			found, err := sshConfigProxyCommandEscape(tt.path, tt.forceUnix)
@@ -366,7 +362,6 @@ func Test_sshConfigOptions_addOption(t *testing.T) {
 	}
 
 	for _, tt := range testCases {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/cli/configssh_test.go b/cli/configssh_test.go
index 60c93b8e94f4b..1ffe93a7b838c 100644
--- a/cli/configssh_test.go
+++ b/cli/configssh_test.go
@@ -688,7 +688,6 @@ func TestConfigSSH_FileWriteAndOptionsFlow(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/cli/exp_errors_test.go b/cli/exp_errors_test.go
index 75272fc86d8d3..61e11dc770afc 100644
--- a/cli/exp_errors_test.go
+++ b/cli/exp_errors_test.go
@@ -49,7 +49,6 @@ ExtractCommandPathsLoop:
 	}
 
 	for _, tt := range cases {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/cli/gitauth/askpass_test.go b/cli/gitauth/askpass_test.go
index d70e791c97afb..e9213daf37bda 100644
--- a/cli/gitauth/askpass_test.go
+++ b/cli/gitauth/askpass_test.go
@@ -60,7 +60,6 @@ func TestParse(t *testing.T) {
 			wantHost: "http://wow.io",
 		},
 	} {
-		tc := tc
 		t.Run(tc.in, func(t *testing.T) {
 			t.Parallel()
 			user, host, err := gitauth.ParseAskpass(tc.in)
diff --git a/cli/notifications_test.go b/cli/notifications_test.go
index 5164657c6c1fb..0e8ece285b450 100644
--- a/cli/notifications_test.go
+++ b/cli/notifications_test.go
@@ -48,7 +48,6 @@ func TestNotifications(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/cli/open_internal_test.go b/cli/open_internal_test.go
index 7af4359a56bc2..5c3ec338aca42 100644
--- a/cli/open_internal_test.go
+++ b/cli/open_internal_test.go
@@ -47,7 +47,6 @@ func Test_resolveAgentAbsPath(t *testing.T) {
 		{"fail with no working directory and rel path on windows", args{relOrAbsPath: "my\\path", agentOS: "windows"}, "", true},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -156,7 +155,6 @@ func Test_buildAppLinkURL(t *testing.T) {
 			expectedLink:      "https://coder.tld/path-base/@username/Test-Workspace.a-workspace-agent/apps/app-slug/",
 		},
 	} {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			baseURL, err := url.Parse(tt.baseURL)
diff --git a/cli/open_test.go b/cli/open_test.go
index f7180ab260fbd..698a4d777984b 100644
--- a/cli/open_test.go
+++ b/cli/open_test.go
@@ -113,7 +113,6 @@ func TestOpenVSCode(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -240,7 +239,6 @@ func TestOpenVSCode_NoAgentDirectory(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -414,8 +412,6 @@ func TestOpenVSCodeDevContainer(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -579,8 +575,6 @@ func TestOpenVSCodeDevContainer_NoAgentDirectory(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/cli/portforward_internal_test.go b/cli/portforward_internal_test.go
index 0d1259713dac9..5698363f95e5e 100644
--- a/cli/portforward_internal_test.go
+++ b/cli/portforward_internal_test.go
@@ -103,7 +103,6 @@ func Test_parsePortForwards(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/cli/portforward_test.go b/cli/portforward_test.go
index 0be029748b3c8..e995b31950314 100644
--- a/cli/portforward_test.go
+++ b/cli/portforward_test.go
@@ -145,7 +145,6 @@ func TestPortForward(t *testing.T) {
 	)
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.name+"_OnePort", func(t *testing.T) {
 			t.Parallel()
 			p1 := setupTestListener(t, c.setupRemote(t))
diff --git a/cli/provisionerjobs_test.go b/cli/provisionerjobs_test.go
index 1566147c5311d..b33fd8b984dc7 100644
--- a/cli/provisionerjobs_test.go
+++ b/cli/provisionerjobs_test.go
@@ -152,7 +152,6 @@ func TestProvisionerJobs(t *testing.T) {
 			{"Member", memberClient, "TemplateVersionImport", prepareTemplateVersionImportJob, false},
 			{"Member", memberClient, "TemplateVersionImportDryRun", prepareTemplateVersionImportJobDryRun, false},
 		} {
-			tt := tt
 			wantMsg := "OK"
 			if !tt.wantCancelled {
 				wantMsg = "FAIL"
diff --git a/cli/root_internal_test.go b/cli/root_internal_test.go
index f95ab04c1c9ec..9eb3fe7609582 100644
--- a/cli/root_internal_test.go
+++ b/cli/root_internal_test.go
@@ -76,7 +76,6 @@ func Test_formatExamples(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/cli/schedule_internal_test.go b/cli/schedule_internal_test.go
index cdbbb9ca6ce26..dea98f97d09fb 100644
--- a/cli/schedule_internal_test.go
+++ b/cli/schedule_internal_test.go
@@ -100,7 +100,6 @@ func TestParseCLISchedule(t *testing.T) {
 			expectedError: errInvalidTimeFormat.Error(),
 		},
 	} {
-		testCase := testCase
 		//nolint:paralleltest // t.Setenv
 		t.Run(testCase.name, func(t *testing.T) {
 			t.Setenv("TZ", testCase.tzEnv)
diff --git a/cli/schedule_test.go b/cli/schedule_test.go
index 60fbf19f4db08..02997a9a4c40d 100644
--- a/cli/schedule_test.go
+++ b/cli/schedule_test.go
@@ -341,8 +341,6 @@ func TestScheduleOverride(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.command, func(t *testing.T) {
 			// Given
 			// Set timezone to Asia/Kolkata to surface any timezone-related bugs.
diff --git a/cli/server_internal_test.go b/cli/server_internal_test.go
index b5417ceb04b8e..263445ccabd6f 100644
--- a/cli/server_internal_test.go
+++ b/cli/server_internal_test.go
@@ -62,7 +62,6 @@ func Test_configureCipherSuites(t *testing.T) {
 	cipherByName := func(cipher string) *tls.CipherSuite {
 		for _, c := range append(tls.CipherSuites(), tls.InsecureCipherSuites()...) {
 			if cipher == c.Name {
-				c := c
 				return c
 			}
 		}
@@ -173,7 +172,6 @@ func Test_configureCipherSuites(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			ctx := context.Background()
@@ -245,7 +243,6 @@ func TestRedirectHTTPToHTTPSDeprecation(t *testing.T) {
 	}
 
 	for _, tc := range testcases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitShort)
@@ -310,7 +307,6 @@ func TestIsDERPPath(t *testing.T) {
 		},
 	}
 	for _, tc := range testcases {
-		tc := tc
 		t.Run(tc.path, func(t *testing.T) {
 			t.Parallel()
 			require.Equal(t, tc.expected, isDERPPath(tc.path))
@@ -363,7 +359,6 @@ func TestEscapePostgresURLUserInfo(t *testing.T) {
 		},
 	}
 	for _, tc := range testcases {
-		tc := tc
 		t.Run(tc.input, func(t *testing.T) {
 			t.Parallel()
 			o, err := escapePostgresURLUserInfo(tc.input)
diff --git a/cli/server_test.go b/cli/server_test.go
index eb3eac8fa5cd4..2d0bbdd24e83b 100644
--- a/cli/server_test.go
+++ b/cli/server_test.go
@@ -471,7 +471,6 @@ func TestServer(t *testing.T) {
 				expectGithubDefaultProviderConfigured: true,
 			},
 		} {
-			tc := tc
 			t.Run(tc.name, func(t *testing.T) {
 				runGitHubProviderTest(t, tc)
 			})
@@ -629,7 +628,6 @@ func TestServer(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
 			t.Run(c.name, func(t *testing.T) {
 				t.Parallel()
 				ctx, cancelFunc := context.WithCancel(context.Background())
@@ -883,8 +881,6 @@ func TestServer(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			t.Run(c.name, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/cli/ssh_test.go b/cli/ssh_test.go
index bee075283c083..127d57b22ae75 100644
--- a/cli/ssh_test.go
+++ b/cli/ssh_test.go
@@ -1517,7 +1517,6 @@ func TestSSH(t *testing.T) {
 		pty.ExpectMatchContext(ctx, "ping pong")
 
 		for i, sock := range sockets {
-			i := i
 			// Start the listener on the "local machine".
 			l, err := net.Listen("unix", sock.local)
 			require.NoError(t, err)
@@ -1641,7 +1640,6 @@ func TestSSH(t *testing.T) {
 		}
 
 		for _, tc := range tcs {
-			tc := tc
 			t.Run(tc.name, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/cli/start_test.go b/cli/start_test.go
index 29fa4cdb46e5f..f64a3f0646303 100644
--- a/cli/start_test.go
+++ b/cli/start_test.go
@@ -343,7 +343,6 @@ func TestStartAutoUpdate(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/cli/templateedit_test.go b/cli/templateedit_test.go
index d5fe730a14559..b551a4abcdb1d 100644
--- a/cli/templateedit_test.go
+++ b/cli/templateedit_test.go
@@ -299,7 +299,6 @@ func TestTemplateEdit(t *testing.T) {
 			}
 
 			for _, c := range cases {
-				c := c
 				t.Run(c.name, func(t *testing.T) {
 					t.Parallel()
 
@@ -416,7 +415,6 @@ func TestTemplateEdit(t *testing.T) {
 			}
 
 			for _, c := range cases {
-				c := c
 				t.Run(c.name, func(t *testing.T) {
 					t.Parallel()
 
diff --git a/cli/templatepull_test.go b/cli/templatepull_test.go
index 99f23d12923cd..5d999de15ed02 100644
--- a/cli/templatepull_test.go
+++ b/cli/templatepull_test.go
@@ -262,8 +262,6 @@ func TestTemplatePull_ToDir(t *testing.T) {
 
 	// nolint: paralleltest // These tests change the current working dir, and is therefore unsuitable for parallelisation.
 	for _, tc := range tests {
-		tc := tc
-
 		t.Run(tc.name, func(t *testing.T) {
 			dir := t.TempDir()
 
diff --git a/cli/templatepush_test.go b/cli/templatepush_test.go
index e1a7e612f4ed6..f7a31d5e0c25f 100644
--- a/cli/templatepush_test.go
+++ b/cli/templatepush_test.go
@@ -485,7 +485,6 @@ func TestTemplatePush(t *testing.T) {
 			}
 
 			for _, tt := range tests {
-				tt := tt
 				t.Run(tt.name, func(t *testing.T) {
 					t.Parallel()
 
diff --git a/cli/util_internal_test.go b/cli/util_internal_test.go
index 5656bf2c81930..6c42033f7c0bf 100644
--- a/cli/util_internal_test.go
+++ b/cli/util_internal_test.go
@@ -30,7 +30,6 @@ func TestDurationDisplay(t *testing.T) {
 		{"24h1m1s", "1d"},
 		{"25h", "1d1h"},
 	} {
-		testCase := testCase
 		t.Run(testCase.Duration, func(t *testing.T) {
 			t.Parallel()
 			d, err := time.ParseDuration(testCase.Duration)
@@ -71,7 +70,6 @@ func TestExtendedParseDuration(t *testing.T) {
 		{"200y200y200y200y200y", 0, false},
 		{"9223372036854775807s", 0, false},
 	} {
-		testCase := testCase
 		t.Run(testCase.Duration, func(t *testing.T) {
 			t.Parallel()
 			actual, err := extendedParseDuration(testCase.Duration)
diff --git a/cli/version_test.go b/cli/version_test.go
index 5802fff6f10f0..14214e995f752 100644
--- a/cli/version_test.go
+++ b/cli/version_test.go
@@ -50,7 +50,6 @@ Full build of Coder, supports the server subcommand.
 			Expected: expectedText,
 		},
 	} {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 			ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitShort)
diff --git a/cli/vpndaemon_windows_test.go b/cli/vpndaemon_windows_test.go
index 98c63277d4fac..b03f74ee796e5 100644
--- a/cli/vpndaemon_windows_test.go
+++ b/cli/vpndaemon_windows_test.go
@@ -52,7 +52,6 @@ func TestVPNDaemonRun(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
 			t.Run(c.Name, func(t *testing.T) {
 				t.Parallel()
 				ctx := testutil.Context(t, testutil.WaitLong)
diff --git a/coderd/agentapi/manifest_internal_test.go b/coderd/agentapi/manifest_internal_test.go
index 33e0cb7613099..7853041349126 100644
--- a/coderd/agentapi/manifest_internal_test.go
+++ b/coderd/agentapi/manifest_internal_test.go
@@ -80,7 +80,6 @@ func Test_vscodeProxyURI(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/agentapi/resources_monitoring_test.go b/coderd/agentapi/resources_monitoring_test.go
index 087ccfd24e459..c491d3789355b 100644
--- a/coderd/agentapi/resources_monitoring_test.go
+++ b/coderd/agentapi/resources_monitoring_test.go
@@ -280,8 +280,6 @@ func TestMemoryResourceMonitor(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -713,8 +711,6 @@ func TestVolumeResourceMonitor(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/agentmetrics/labels_test.go b/coderd/agentmetrics/labels_test.go
index b383ca0b25c0d..07f1998fed420 100644
--- a/coderd/agentmetrics/labels_test.go
+++ b/coderd/agentmetrics/labels_test.go
@@ -43,8 +43,6 @@ func TestValidateAggregationLabels(t *testing.T) {
 	}
 
 	for _, tc := range tests {
-		tc := tc
-
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/apikey/apikey_test.go b/coderd/apikey/apikey_test.go
index ef4d260ddf0a6..198ef11511b3e 100644
--- a/coderd/apikey/apikey_test.go
+++ b/coderd/apikey/apikey_test.go
@@ -107,7 +107,6 @@ func TestGenerate(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/audit_test.go b/coderd/audit_test.go
index 18bcd78b38807..e6fa985038155 100644
--- a/coderd/audit_test.go
+++ b/coderd/audit_test.go
@@ -454,7 +454,6 @@ func TestAuditLogsFilter(t *testing.T) {
 		}
 
 		for _, testCase := range testCases {
-			testCase := testCase
 			// Test filtering
 			t.Run(testCase.Name, func(t *testing.T) {
 				t.Parallel()
diff --git a/coderd/authorize_test.go b/coderd/authorize_test.go
index 3af6cfd7d620e..b8084211de60c 100644
--- a/coderd/authorize_test.go
+++ b/coderd/authorize_test.go
@@ -125,8 +125,6 @@ func TestCheckPermissions(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
-
 		t.Run("CheckAuthorization/"+c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/autobuild/lifecycle_executor_internal_test.go b/coderd/autobuild/lifecycle_executor_internal_test.go
index bfe3bb53592b3..2d556d58a2d5e 100644
--- a/coderd/autobuild/lifecycle_executor_internal_test.go
+++ b/coderd/autobuild/lifecycle_executor_internal_test.go
@@ -153,7 +153,6 @@ func Test_isEligibleForAutostart(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/autobuild/lifecycle_executor_test.go b/coderd/autobuild/lifecycle_executor_test.go
index 453de63031a47..65af911122aba 100644
--- a/coderd/autobuild/lifecycle_executor_test.go
+++ b/coderd/autobuild/lifecycle_executor_test.go
@@ -177,7 +177,6 @@ func TestExecutorAutostartTemplateUpdated(t *testing.T) {
 		},
 	}
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			var (
diff --git a/coderd/autobuild/notify/notifier_test.go b/coderd/autobuild/notify/notifier_test.go
index aa060406d30a1..4561fd2a45336 100644
--- a/coderd/autobuild/notify/notifier_test.go
+++ b/coderd/autobuild/notify/notifier_test.go
@@ -83,7 +83,6 @@ func TestNotifier(t *testing.T) {
 	}
 
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.Name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitShort)
diff --git a/coderd/azureidentity/azureidentity_test.go b/coderd/azureidentity/azureidentity_test.go
index bd55ae2538d3a..bd94f836beb3b 100644
--- a/coderd/azureidentity/azureidentity_test.go
+++ b/coderd/azureidentity/azureidentity_test.go
@@ -47,7 +47,6 @@ func TestValidate(t *testing.T) {
 		vmID:    "960a4b4a-dab2-44ef-9b73-7753043b4f16",
 		date:    mustTime(time.RFC3339, "2024-04-22T17:32:44Z"),
 	}} {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			vm, err := azureidentity.Validate(context.Background(), tc.payload, azureidentity.Options{
diff --git a/coderd/coderd_internal_test.go b/coderd/coderd_internal_test.go
index 34f5738bf90a0..b03985e1e157d 100644
--- a/coderd/coderd_internal_test.go
+++ b/coderd/coderd_internal_test.go
@@ -32,8 +32,6 @@ func TestStripSlashesMW(t *testing.T) {
 	})
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run("chi/"+tt.name, func(t *testing.T) {
 			t.Parallel()
 			req := httptest.NewRequest("GET", tt.inputPath, nil)
diff --git a/coderd/database/db2sdk/db2sdk_test.go b/coderd/database/db2sdk/db2sdk_test.go
index bfee2f52cbbd9..8e879569e014a 100644
--- a/coderd/database/db2sdk/db2sdk_test.go
+++ b/coderd/database/db2sdk/db2sdk_test.go
@@ -119,8 +119,6 @@ func TestProvisionerJobStatus(t *testing.T) {
 	org := dbgen.Organization(t, db, database.Organization{})
 
 	for i, tc := range cases {
-		tc := tc
-		i := i
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			// Populate standard fields
diff --git a/coderd/database/dbauthz/customroles_test.go b/coderd/database/dbauthz/customroles_test.go
index 815d6629f64f9..5e19f43ab5376 100644
--- a/coderd/database/dbauthz/customroles_test.go
+++ b/coderd/database/dbauthz/customroles_test.go
@@ -46,7 +46,6 @@ func TestInsertCustomRoles(t *testing.T) {
 	merge := func(u ...interface{}) rbac.Roles {
 		all := make([]rbac.Role, 0)
 		for _, v := range u {
-			v := v
 			switch t := v.(type) {
 			case rbac.Role:
 				all = append(all, t)
@@ -201,8 +200,6 @@ func TestInsertCustomRoles(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
-
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			db := dbmem.New()
diff --git a/coderd/database/dbauthz/groupsauth_test.go b/coderd/database/dbauthz/groupsauth_test.go
index a9f26e303d644..79f936e103e09 100644
--- a/coderd/database/dbauthz/groupsauth_test.go
+++ b/coderd/database/dbauthz/groupsauth_test.go
@@ -135,7 +135,6 @@ func TestGroupsAuth(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/database/dbauthz/setup_test.go b/coderd/database/dbauthz/setup_test.go
index 776667ba053cc..29ca421d6f11e 100644
--- a/coderd/database/dbauthz/setup_test.go
+++ b/coderd/database/dbauthz/setup_test.go
@@ -458,7 +458,6 @@ type AssertRBAC struct {
 func values(ins ...any) []reflect.Value {
 	out := make([]reflect.Value, 0)
 	for _, input := range ins {
-		input := input
 		out = append(out, reflect.ValueOf(input))
 	}
 	return out
diff --git a/coderd/database/dbmem/dbmem.go b/coderd/database/dbmem/dbmem.go
index 7095fad25f854..25b44e2930892 100644
--- a/coderd/database/dbmem/dbmem.go
+++ b/coderd/database/dbmem/dbmem.go
@@ -1811,7 +1811,6 @@ func (q *FakeQuerier) CustomRoles(_ context.Context, arg database.CustomRolesPar
 
 	found := make([]database.CustomRole, 0)
 	for _, role := range q.data.customRoles {
-		role := role
 		if len(arg.LookupRoles) > 0 {
 			if !slices.ContainsFunc(arg.LookupRoles, func(pair database.NameOrganizationPair) bool {
 				if pair.Name != role.Name {
@@ -2920,7 +2919,6 @@ func (q *FakeQuerier) GetAuthorizationUserRoles(_ context.Context, userID uuid.U
 	roles := make([]string, 0)
 	for _, u := range q.users {
 		if u.ID == userID {
-			u := u
 			roles = append(roles, u.RBACRoles...)
 			roles = append(roles, "member")
 			user = &u
@@ -8123,7 +8121,6 @@ func (q *FakeQuerier) GetWorkspaceByOwnerIDAndName(_ context.Context, arg databa
 
 	var found *database.WorkspaceTable
 	for _, workspace := range q.workspaces {
-		workspace := workspace
 		if workspace.OwnerID != arg.OwnerID {
 			continue
 		}
@@ -8181,7 +8178,6 @@ func (q *FakeQuerier) GetWorkspaceByWorkspaceAppID(_ context.Context, workspaceA
 	defer q.mutex.RUnlock()
 
 	for _, workspaceApp := range q.workspaceApps {
-		workspaceApp := workspaceApp
 		if workspaceApp.ID == workspaceAppID {
 			return q.getWorkspaceByAgentIDNoLock(context.Background(), workspaceApp.AgentID)
 		}
@@ -10424,7 +10420,6 @@ func (q *FakeQuerier) OrganizationMembers(_ context.Context, arg database.Organi
 			continue
 		}
 
-		organizationMember := organizationMember
 		user, _ := q.getUserByIDNoLock(organizationMember.UserID)
 		tmp = append(tmp, database.OrganizationMembersRow{
 			OrganizationMember: organizationMember,
diff --git a/coderd/database/dbmem/dbmem_test.go b/coderd/database/dbmem/dbmem_test.go
index 11d30e61a895d..c3df828b95c98 100644
--- a/coderd/database/dbmem/dbmem_test.go
+++ b/coderd/database/dbmem/dbmem_test.go
@@ -188,7 +188,6 @@ func TestProxyByHostname(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/database/migrations/migrate_test.go b/coderd/database/migrations/migrate_test.go
index cd843bd97aa7a..f5d84e6532083 100644
--- a/coderd/database/migrations/migrate_test.go
+++ b/coderd/database/migrations/migrate_test.go
@@ -288,8 +288,6 @@ func TestMigrateUpWithFixtures(t *testing.T) {
 	})
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/database/querier_test.go b/coderd/database/querier_test.go
index 600fb8269909a..5ae43138bd634 100644
--- a/coderd/database/querier_test.go
+++ b/coderd/database/querier_test.go
@@ -1156,7 +1156,6 @@ func TestProxyByHostname(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -1394,7 +1393,6 @@ func TestGetUsers_IncludeSystem(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -1862,8 +1860,6 @@ func TestReadCustomRoles(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
-
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -2506,7 +2502,6 @@ func TestGetProvisionerJobsByIDsWithQueuePosition(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc // Capture loop variable to avoid data races
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			db, _ := dbtestutil.NewDB(t)
@@ -2947,7 +2942,6 @@ func TestGetUserStatusCounts(t *testing.T) {
 	}
 
 	for _, tz := range timezones {
-		tz := tz
 		t.Run(tz, func(t *testing.T) {
 			t.Parallel()
 
@@ -2995,7 +2989,6 @@ func TestGetUserStatusCounts(t *testing.T) {
 				}
 
 				for _, tc := range testCases {
-					tc := tc
 					t.Run(tc.name, func(t *testing.T) {
 						t.Parallel()
 						db, _ := dbtestutil.NewDB(t)
@@ -3163,7 +3156,6 @@ func TestGetUserStatusCounts(t *testing.T) {
 				}
 
 				for _, tc := range testCases {
-					tc := tc
 					t.Run(tc.name, func(t *testing.T) {
 						t.Parallel()
 						db, _ := dbtestutil.NewDB(t)
@@ -3296,7 +3288,6 @@ func TestGetUserStatusCounts(t *testing.T) {
 				}
 
 				for _, tc := range testCases {
-					tc := tc
 					t.Run(tc.name, func(t *testing.T) {
 						t.Parallel()
 
diff --git a/coderd/devtunnel/tunnel_test.go b/coderd/devtunnel/tunnel_test.go
index ca1c5b7752628..50573c19e5f27 100644
--- a/coderd/devtunnel/tunnel_test.go
+++ b/coderd/devtunnel/tunnel_test.go
@@ -48,8 +48,6 @@ func TestTunnel(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/externalauth/externalauth_internal_test.go b/coderd/externalauth/externalauth_internal_test.go
index 26515ff78f215..f50593c019b4f 100644
--- a/coderd/externalauth/externalauth_internal_test.go
+++ b/coderd/externalauth/externalauth_internal_test.go
@@ -102,7 +102,6 @@ func TestGitlabDefaults(t *testing.T) {
 		},
 	}
 	for _, c := range tests {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 			applyDefaultsToConfig(&c.input)
@@ -177,7 +176,6 @@ func Test_bitbucketServerConfigDefaults(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			applyDefaultsToConfig(tt.config)
diff --git a/coderd/externalauth/externalauth_test.go b/coderd/externalauth/externalauth_test.go
index ec540fba2eac6..81cf5aa1f21e2 100644
--- a/coderd/externalauth/externalauth_test.go
+++ b/coderd/externalauth/externalauth_test.go
@@ -463,7 +463,6 @@ func TestConvertYAML(t *testing.T) {
 		}},
 		Error: "device auth url must be provided",
 	}} {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			output, err := externalauth.ConvertConfig(instrument, tc.Input, &url.URL{})
diff --git a/coderd/healthcheck/health/model_test.go b/coderd/healthcheck/health/model_test.go
index 8b28dc5862517..2ff51652f3275 100644
--- a/coderd/healthcheck/health/model_test.go
+++ b/coderd/healthcheck/health/model_test.go
@@ -21,7 +21,6 @@ func Test_MessageURL(t *testing.T) {
 		{"default", health.CodeAccessURLFetch, "", "https://coder.com/docs/admin/monitoring/health-check#eacs03"},
 		{"custom docs base", health.CodeAccessURLFetch, "https://example.com/docs", "https://example.com/docs/admin/monitoring/health-check#eacs03"},
 	} {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			uut := health.Message{Code: tt.code}
diff --git a/coderd/healthcheck/healthcheck_test.go b/coderd/healthcheck/healthcheck_test.go
index 9c744b42d1dca..2b49b3215e251 100644
--- a/coderd/healthcheck/healthcheck_test.go
+++ b/coderd/healthcheck/healthcheck_test.go
@@ -508,7 +508,6 @@ func TestHealthcheck(t *testing.T) {
 		},
 		severity: health.SeverityError,
 	}} {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/healthcheck/provisioner_test.go b/coderd/healthcheck/provisioner_test.go
index 93871f4a709ad..e2f0c6119ed09 100644
--- a/coderd/healthcheck/provisioner_test.go
+++ b/coderd/healthcheck/provisioner_test.go
@@ -335,7 +335,6 @@ func TestProvisionerDaemonReport(t *testing.T) {
 			expectedItems: []healthsdk.ProvisionerDaemonsReportItem{},
 		},
 	} {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/healthcheck/workspaceproxy_internal_test.go b/coderd/healthcheck/workspaceproxy_internal_test.go
index 5a7875518df7e..be367ee2061c9 100644
--- a/coderd/healthcheck/workspaceproxy_internal_test.go
+++ b/coderd/healthcheck/workspaceproxy_internal_test.go
@@ -47,7 +47,6 @@ func Test_WorkspaceProxyReport_appendErrors(t *testing.T) {
 			errs:     []string{assert.AnError.Error(), "another error"},
 		},
 	} {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -85,7 +84,6 @@ func Test_calculateSeverity(t *testing.T) {
 		{2, 0, 0, health.SeverityError},
 		{2, 0, 1, health.SeverityError},
 	} {
-		tt := tt
 		name := fmt.Sprintf("%d total, %d healthy, %d warning -> %s", tt.total, tt.healthy, tt.warning, tt.expected)
 		t.Run(name, func(t *testing.T) {
 			t.Parallel()
diff --git a/coderd/healthcheck/workspaceproxy_test.go b/coderd/healthcheck/workspaceproxy_test.go
index d5bd5c12210b8..e8fc7a339c408 100644
--- a/coderd/healthcheck/workspaceproxy_test.go
+++ b/coderd/healthcheck/workspaceproxy_test.go
@@ -172,7 +172,6 @@ func TestWorkspaceProxies(t *testing.T) {
 			expectedSeverity:  health.SeverityError,
 		},
 	} {
-		tt := tt
 		if tt.name != "Enabled/ProxyWarnings" {
 			continue
 		}
diff --git a/coderd/httpapi/cookie_test.go b/coderd/httpapi/cookie_test.go
index 4d44cd8f7d130..e653e3653ba14 100644
--- a/coderd/httpapi/cookie_test.go
+++ b/coderd/httpapi/cookie_test.go
@@ -26,7 +26,6 @@ func TestStripCoderCookies(t *testing.T) {
 		"coder_session_token=ok; oauth_state=wow; oauth_redirect=/",
 		"",
 	}} {
-		tc := tc
 		t.Run(tc.Input, func(t *testing.T) {
 			t.Parallel()
 			require.Equal(t, tc.Output, httpapi.StripCoderCookies(tc.Input))
diff --git a/coderd/httpapi/json_test.go b/coderd/httpapi/json_test.go
index a0a93e884d44f..8cfe8068e7b2e 100644
--- a/coderd/httpapi/json_test.go
+++ b/coderd/httpapi/json_test.go
@@ -46,8 +46,6 @@ func TestDuration(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			t.Run(c.expected, func(t *testing.T) {
 				t.Parallel()
 
@@ -109,8 +107,6 @@ func TestDuration(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			t.Run(c.value, func(t *testing.T) {
 				t.Parallel()
 
@@ -153,8 +149,6 @@ func TestDuration(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			t.Run(c.value, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/coderd/httpmw/authorize_test.go b/coderd/httpmw/authorize_test.go
index 3ee9d92742252..4991dbeb9c46e 100644
--- a/coderd/httpmw/authorize_test.go
+++ b/coderd/httpmw/authorize_test.go
@@ -107,7 +107,6 @@ func TestExtractUserRoles(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/httpmw/cors_test.go b/coderd/httpmw/cors_test.go
index 57111799ff292..4d48d535a23e4 100644
--- a/coderd/httpmw/cors_test.go
+++ b/coderd/httpmw/cors_test.go
@@ -91,7 +91,6 @@ func TestWorkspaceAppCors(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/httpmw/csrf_test.go b/coderd/httpmw/csrf_test.go
index 9e8094ad50d6d..62e8150fb099f 100644
--- a/coderd/httpmw/csrf_test.go
+++ b/coderd/httpmw/csrf_test.go
@@ -57,7 +57,6 @@ func TestCSRFExemptList(t *testing.T) {
 	csrfmw := mw(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {})).(*nosurf.CSRFHandler)
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/httpmw/hsts_test.go b/coderd/httpmw/hsts_test.go
index 3bc3463e69e65..0e36f8993c1dd 100644
--- a/coderd/httpmw/hsts_test.go
+++ b/coderd/httpmw/hsts_test.go
@@ -77,7 +77,6 @@ func TestHSTS(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/httpmw/loggermw/logger_internal_test.go b/coderd/httpmw/loggermw/logger_internal_test.go
index 53cc9f4eb9462..f372c665fda14 100644
--- a/coderd/httpmw/loggermw/logger_internal_test.go
+++ b/coderd/httpmw/loggermw/logger_internal_test.go
@@ -247,7 +247,6 @@ func TestRequestLogger_RouteParamsLogging(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/httpmw/patternmatcher/routepatterns_test.go b/coderd/httpmw/patternmatcher/routepatterns_test.go
index 58d914d231e90..623c22afbab92 100644
--- a/coderd/httpmw/patternmatcher/routepatterns_test.go
+++ b/coderd/httpmw/patternmatcher/routepatterns_test.go
@@ -108,7 +108,6 @@ func Test_RoutePatterns(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/httpmw/realip_test.go b/coderd/httpmw/realip_test.go
index 3070070bd90d8..18b870ae379c2 100644
--- a/coderd/httpmw/realip_test.go
+++ b/coderd/httpmw/realip_test.go
@@ -200,7 +200,6 @@ func TestExtractAddress(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -235,9 +234,6 @@ func TestTrustedOrigins(t *testing.T) {
 		// ipv6: trust an IPv4 network
 		for _, trusted := range []string{"none", "ipv4", "ipv6"} {
 			for _, header := range []string{"Cf-Connecting-Ip", "True-Client-Ip", "X-Real-Ip", "X-Forwarded-For"} {
-				trusted := trusted
-				header := header
-				proto := proto
 				name := fmt.Sprintf("%s-%s-%s", trusted, proto, strings.ToLower(header))
 
 				t.Run(name, func(t *testing.T) {
@@ -311,7 +307,6 @@ func TestCorruptedHeaders(t *testing.T) {
 	t.Parallel()
 
 	for _, header := range []string{"Cf-Connecting-Ip", "True-Client-Ip", "X-Real-Ip", "X-Forwarded-For"} {
-		header := header
 		name := strings.ToLower(header)
 
 		t.Run(name, func(t *testing.T) {
@@ -364,9 +359,6 @@ func TestAddressFamilies(t *testing.T) {
 	for _, clientFamily := range []string{"ipv4", "ipv6"} {
 		for _, proxyFamily := range []string{"ipv4", "ipv6"} {
 			for _, header := range []string{"Cf-Connecting-Ip", "True-Client-Ip", "X-Real-Ip", "X-Forwarded-For"} {
-				clientFamily := clientFamily
-				proxyFamily := proxyFamily
-				header := header
 				name := fmt.Sprintf("%s-%s-%s", strings.ToLower(header), clientFamily, proxyFamily)
 
 				t.Run(name, func(t *testing.T) {
@@ -466,7 +458,6 @@ func TestFilterUntrusted(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -612,7 +603,6 @@ func TestApplicationProxy(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/httpmw/recover_test.go b/coderd/httpmw/recover_test.go
index b76c5b105baf5..d4d4227ff15ef 100644
--- a/coderd/httpmw/recover_test.go
+++ b/coderd/httpmw/recover_test.go
@@ -52,8 +52,6 @@ func TestRecover(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/httpmw/workspaceparam_test.go b/coderd/httpmw/workspaceparam_test.go
index 33b0c753068f7..85e11cf3975fd 100644
--- a/coderd/httpmw/workspaceparam_test.go
+++ b/coderd/httpmw/workspaceparam_test.go
@@ -316,7 +316,6 @@ func TestWorkspaceAgentByNameParam(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 			db, r := setupWorkspaceWithAgents(t, setupConfig{
diff --git a/coderd/idpsync/group_test.go b/coderd/idpsync/group_test.go
index 7b0fb70ae8f68..478d6557de551 100644
--- a/coderd/idpsync/group_test.go
+++ b/coderd/idpsync/group_test.go
@@ -243,7 +243,6 @@ func TestGroupSyncTable(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		// The final test, "AllTogether", cannot run in parallel.
 		// These tests are nearly instant using the memory db, so
 		// this is still fast without being in parallel.
@@ -341,8 +340,6 @@ func TestGroupSyncTable(t *testing.T) {
 		})
 
 		for _, tc := range testCases {
-			tc := tc
-
 			orgID := uuid.New()
 			SetupOrganization(t, s, db, user, orgID, tc)
 			asserts = append(asserts, func(t *testing.T) {
@@ -523,7 +520,6 @@ func TestApplyGroupDifference(t *testing.T) {
 	}
 
 	for _, tc := range testCase {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -713,7 +709,6 @@ func TestExpectedGroupEqual(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/idpsync/idpsync_test.go b/coderd/idpsync/idpsync_test.go
index 0db5c66bed174..f3dc9c2f07986 100644
--- a/coderd/idpsync/idpsync_test.go
+++ b/coderd/idpsync/idpsync_test.go
@@ -159,7 +159,6 @@ func TestParseStringSliceClaim(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/idpsync/role_test.go b/coderd/idpsync/role_test.go
index f07d97a2b0f31..6df091097b966 100644
--- a/coderd/idpsync/role_test.go
+++ b/coderd/idpsync/role_test.go
@@ -186,7 +186,6 @@ func TestRoleSyncTable(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		// The final test, "AllTogether", cannot run in parallel.
 		// These tests are nearly instant using the memory db, so
 		// this is still fast without being in parallel.
@@ -248,8 +247,6 @@ func TestRoleSyncTable(t *testing.T) {
 		var asserts []func(t *testing.T)
 
 		for _, tc := range testCases {
-			tc := tc
-
 			orgID := uuid.New()
 			SetupOrganization(t, s, db, user, orgID, tc)
 			asserts = append(asserts, func(t *testing.T) {
diff --git a/coderd/inboxnotifications_internal_test.go b/coderd/inboxnotifications_internal_test.go
index e7d9a85d3e74f..c99d376bb77e9 100644
--- a/coderd/inboxnotifications_internal_test.go
+++ b/coderd/inboxnotifications_internal_test.go
@@ -29,8 +29,6 @@ func TestInboxNotifications_ensureNotificationIcon(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/inboxnotifications_test.go b/coderd/inboxnotifications_test.go
index 82ae539518ae0..c43149d8c8211 100644
--- a/coderd/inboxnotifications_test.go
+++ b/coderd/inboxnotifications_test.go
@@ -57,7 +57,6 @@ func TestInboxNotification_Watch(t *testing.T) {
 		}
 
 		for _, tt := range tests {
-			tt := tt
 			t.Run(tt.name, func(t *testing.T) {
 				t.Parallel()
 
@@ -393,7 +392,6 @@ func TestInboxNotifications_List(t *testing.T) {
 		}
 
 		for _, tt := range tests {
-			tt := tt
 			t.Run(tt.name, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/coderd/insights_internal_test.go b/coderd/insights_internal_test.go
index 111bd268e8855..d3302e23cc85b 100644
--- a/coderd/insights_internal_test.go
+++ b/coderd/insights_internal_test.go
@@ -144,7 +144,6 @@ func Test_parseInsightsStartAndEndTime(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -253,8 +252,6 @@ func Test_parseInsightsInterval_week(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -323,7 +320,6 @@ func TestLastReportIntervalHasAtLeastSixDays(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/insights_test.go b/coderd/insights_test.go
index 693bb48811acc..ded030351a3b3 100644
--- a/coderd/insights_test.go
+++ b/coderd/insights_test.go
@@ -550,8 +550,6 @@ func TestTemplateInsights_Golden(t *testing.T) {
 
 		// Prepare all the templates.
 		for _, template := range templates {
-			template := template
-
 			var parameters []*proto.RichParameter
 			for _, parameter := range template.parameters {
 				var options []*proto.RichParameterOption
@@ -582,10 +580,7 @@ func TestTemplateInsights_Golden(t *testing.T) {
 			)
 			var resources []*proto.Resource
 			for _, user := range users {
-				user := user
 				for _, workspace := range user.workspaces {
-					workspace := workspace
-
 					if workspace.template != template {
 						continue
 					}
@@ -1246,7 +1241,6 @@ func TestTemplateInsights_Golden(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -1261,7 +1255,6 @@ func TestTemplateInsights_Golden(t *testing.T) {
 			_, _ = <-events, <-events
 
 			for _, req := range tt.requests {
-				req := req
 				t.Run(req.name, func(t *testing.T) {
 					t.Parallel()
 
@@ -1489,8 +1482,6 @@ func TestUserActivityInsights_Golden(t *testing.T) {
 
 		// Prepare all the templates.
 		for _, template := range templates {
-			template := template
-
 			// Prepare all workspace resources (agents and apps).
 			var (
 				createWorkspaces []func(uuid.UUID)
@@ -1498,10 +1489,7 @@ func TestUserActivityInsights_Golden(t *testing.T) {
 			)
 			var resources []*proto.Resource
 			for _, user := range users {
-				user := user
 				for _, workspace := range user.workspaces {
-					workspace := workspace
-
 					if workspace.template != template {
 						continue
 					}
@@ -2031,7 +2019,6 @@ func TestUserActivityInsights_Golden(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -2046,7 +2033,6 @@ func TestUserActivityInsights_Golden(t *testing.T) {
 			_, _ = <-events, <-events
 
 			for _, req := range tt.requests {
-				req := req
 				t.Run(req.name, func(t *testing.T) {
 					t.Parallel()
 
@@ -2159,8 +2145,6 @@ func TestTemplateInsights_RBAC(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(fmt.Sprintf("with interval=%q", tt.interval), func(t *testing.T) {
 			t.Parallel()
 
@@ -2279,9 +2263,6 @@ func TestGenericInsights_RBAC(t *testing.T) {
 	}
 
 	for endpointName, endpoint := range endpoints {
-		endpointName := endpointName
-		endpoint := endpoint
-
 		t.Run(fmt.Sprintf("With%sEndpoint", endpointName), func(t *testing.T) {
 			t.Parallel()
 
@@ -2291,8 +2272,6 @@ func TestGenericInsights_RBAC(t *testing.T) {
 			}
 
 			for _, tt := range tests {
-				tt := tt
-
 				t.Run("AsOwner", func(t *testing.T) {
 					t.Parallel()
 
diff --git a/coderd/jobreaper/detector_test.go b/coderd/jobreaper/detector_test.go
index 28457aeeca3a8..4078f92c03a36 100644
--- a/coderd/jobreaper/detector_test.go
+++ b/coderd/jobreaper/detector_test.go
@@ -844,8 +844,6 @@ func TestDetectorPushesLogs(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/jwtutils/jwt_test.go b/coderd/jwtutils/jwt_test.go
index a2126092ff015..9a9ae8d3f44fb 100644
--- a/coderd/jwtutils/jwt_test.go
+++ b/coderd/jwtutils/jwt_test.go
@@ -149,12 +149,9 @@ func TestClaims(t *testing.T) {
 	}
 
 	for _, tt := range types {
-		tt := tt
-
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 			for _, c := range cases {
-				c := c
 				t.Run(c.name, func(t *testing.T) {
 					t.Parallel()
 
diff --git a/coderd/metricscache/metricscache_test.go b/coderd/metricscache/metricscache_test.go
index 53852f41c904b..4582187a33651 100644
--- a/coderd/metricscache/metricscache_test.go
+++ b/coderd/metricscache/metricscache_test.go
@@ -202,7 +202,6 @@ func TestCache_BuildTime(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/notifications/dispatch/inbox_test.go b/coderd/notifications/dispatch/inbox_test.go
index a06b698e9769a..744623ed2c99f 100644
--- a/coderd/notifications/dispatch/inbox_test.go
+++ b/coderd/notifications/dispatch/inbox_test.go
@@ -69,7 +69,6 @@ func TestInbox(t *testing.T) {
 	}
 
 	for _, tc := range tests {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/notifications/notifications_test.go b/coderd/notifications/notifications_test.go
index b3e087a9e7d8f..ec9edee4c8514 100644
--- a/coderd/notifications/notifications_test.go
+++ b/coderd/notifications/notifications_test.go
@@ -1283,8 +1283,6 @@ func TestNotificationTemplates_Golden(t *testing.T) {
 	}
 
 	for _, tc := range tests {
-		tc := tc
-
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -2006,8 +2004,6 @@ func TestNotificationTargetMatrix(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/notifications/render/gotmpl_test.go b/coderd/notifications/render/gotmpl_test.go
index 25e52cc07f671..c49cab7b991fd 100644
--- a/coderd/notifications/render/gotmpl_test.go
+++ b/coderd/notifications/render/gotmpl_test.go
@@ -68,8 +68,6 @@ func TestGoTemplate(t *testing.T) {
 	}
 
 	for _, tc := range tests {
-		tc := tc // unnecessary as of go1.22 but the linter is outdated
-
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/oauth2_test.go b/coderd/oauth2_test.go
index f5311be173bac..e081d3e1483db 100644
--- a/coderd/oauth2_test.go
+++ b/coderd/oauth2_test.go
@@ -151,7 +151,6 @@ func TestOAuth2ProviderApps(t *testing.T) {
 		require.NoError(t, err)
 
 		for _, test := range tests {
-			test := test
 			t.Run(test.name, func(t *testing.T) {
 				t.Parallel()
 				ctx := testutil.Context(t, testutil.WaitLong)
@@ -661,7 +660,6 @@ func TestOAuth2ProviderTokenExchange(t *testing.T) {
 		},
 	}
 	for _, test := range tests {
-		test := test
 		t.Run(test.name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitLong)
@@ -804,7 +802,6 @@ func TestOAuth2ProviderTokenRefresh(t *testing.T) {
 		},
 	}
 	for _, test := range tests {
-		test := test
 		t.Run(test.name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitLong)
@@ -996,7 +993,6 @@ func TestOAuth2ProviderRevoke(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitLong)
diff --git a/coderd/pagination_internal_test.go b/coderd/pagination_internal_test.go
index adcfde6bbb641..18d98c2fab319 100644
--- a/coderd/pagination_internal_test.go
+++ b/coderd/pagination_internal_test.go
@@ -110,7 +110,6 @@ func TestPagination(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 			rw := httptest.NewRecorder()
diff --git a/coderd/prebuilds/preset_snapshot_test.go b/coderd/prebuilds/preset_snapshot_test.go
index 0f7774f3a9155..8a1a10451323a 100644
--- a/coderd/prebuilds/preset_snapshot_test.go
+++ b/coderd/prebuilds/preset_snapshot_test.go
@@ -420,7 +420,6 @@ func TestInProgressActions(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -650,7 +649,6 @@ func TestExpiredPrebuilds(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/presets_test.go b/coderd/presets_test.go
index dc47b10cfd36f..1239cb655a63f 100644
--- a/coderd/presets_test.go
+++ b/coderd/presets_test.go
@@ -78,7 +78,6 @@ func TestTemplateVersionPresets(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitShort)
diff --git a/coderd/prometheusmetrics/aggregator_test.go b/coderd/prometheusmetrics/aggregator_test.go
index 0930f186bd328..6cbe5514b1c2e 100644
--- a/coderd/prometheusmetrics/aggregator_test.go
+++ b/coderd/prometheusmetrics/aggregator_test.go
@@ -587,8 +587,6 @@ func TestLabelsAggregation(t *testing.T) {
 	}
 
 	for _, tc := range tests {
-		tc := tc
-
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/prometheusmetrics/prometheusmetrics_internal_test.go b/coderd/prometheusmetrics/prometheusmetrics_internal_test.go
index 5eaf1d92ed67f..3a6ecec5c12ec 100644
--- a/coderd/prometheusmetrics/prometheusmetrics_internal_test.go
+++ b/coderd/prometheusmetrics/prometheusmetrics_internal_test.go
@@ -29,8 +29,6 @@ func TestFilterAcceptableAgentLabels(t *testing.T) {
 	}
 
 	for _, tc := range tests {
-		tc := tc
-
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/prometheusmetrics/prometheusmetrics_test.go b/coderd/prometheusmetrics/prometheusmetrics_test.go
index 34309042c5f55..1ce6b72347999 100644
--- a/coderd/prometheusmetrics/prometheusmetrics_test.go
+++ b/coderd/prometheusmetrics/prometheusmetrics_test.go
@@ -99,7 +99,6 @@ func TestActiveUsers(t *testing.T) {
 		},
 		Count: 2,
 	}} {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			registry := prometheus.NewRegistry()
@@ -161,7 +160,6 @@ func TestUsers(t *testing.T) {
 		},
 		Count: map[database.UserStatus]int{database.UserStatusActive: 3},
 	}} {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitShort)
@@ -250,7 +248,6 @@ func TestWorkspaceLatestBuildTotals(t *testing.T) {
 			codersdk.ProvisionerJobRunning:   1,
 		},
 	}} {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			registry := prometheus.NewRegistry()
@@ -327,7 +324,6 @@ func TestWorkspaceLatestBuildStatuses(t *testing.T) {
 			codersdk.ProvisionerJobRunning:   1,
 		},
 	}} {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			registry := prometheus.NewRegistry()
@@ -660,8 +656,6 @@ func TestExperimentsMetric(t *testing.T) {
 	}
 
 	for _, tc := range tests {
-		tc := tc
-
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			reg := prometheus.NewRegistry()
diff --git a/coderd/promoauth/oauth2_test.go b/coderd/promoauth/oauth2_test.go
index 9e31d90944f36..5aeec4f0fb949 100644
--- a/coderd/promoauth/oauth2_test.go
+++ b/coderd/promoauth/oauth2_test.go
@@ -155,7 +155,6 @@ func TestGithubRateLimits(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/provisionerdserver/acquirer_test.go b/coderd/provisionerdserver/acquirer_test.go
index e90fb3df0198a..817bae45bbd60 100644
--- a/coderd/provisionerdserver/acquirer_test.go
+++ b/coderd/provisionerdserver/acquirer_test.go
@@ -466,7 +466,6 @@ func TestAcquirer_MatchTags(t *testing.T) {
 		},
 	}
 	for _, tt := range testCases {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitShort)
diff --git a/coderd/provisionerdserver/provisionerdserver_test.go b/coderd/provisionerdserver/provisionerdserver_test.go
index 695437068f50f..dfa767b297f4c 100644
--- a/coderd/provisionerdserver/provisionerdserver_test.go
+++ b/coderd/provisionerdserver/provisionerdserver_test.go
@@ -150,7 +150,6 @@ func TestAcquireJob(t *testing.T) {
 		}},
 	}
 	for _, tc := range cases {
-		tc := tc
 		t.Run(tc.name+"_InitiatorNotFound", func(t *testing.T) {
 			t.Parallel()
 			srv, db, _, pd := setup(t, false, nil)
@@ -176,7 +175,6 @@ func TestAcquireJob(t *testing.T) {
 			sdkproto.PrebuiltWorkspaceBuildStage_CREATE,
 			sdkproto.PrebuiltWorkspaceBuildStage_CLAIM,
 		} {
-			prebuiltWorkspaceBuildStage := prebuiltWorkspaceBuildStage
 			t.Run(tc.name+"_WorkspaceBuildJob_Stage"+prebuiltWorkspaceBuildStage.String(), func(t *testing.T) {
 				t.Parallel()
 				// Set the max session token lifetime so we can assert we
@@ -1709,8 +1707,6 @@ func TestCompleteJob(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			t.Run(c.name, func(t *testing.T) {
 				t.Parallel()
 
@@ -2134,8 +2130,6 @@ func TestCompleteJob(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			t.Run(c.name, func(t *testing.T) {
 				t.Parallel()
 
@@ -2579,7 +2573,6 @@ func TestInsertWorkspacePresetsAndParameters(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/provisionerjobs_internal_test.go b/coderd/provisionerjobs_internal_test.go
index f3bc2eb1dea99..bc94836028ce4 100644
--- a/coderd/provisionerjobs_internal_test.go
+++ b/coderd/provisionerjobs_internal_test.go
@@ -132,7 +132,6 @@ func TestConvertProvisionerJob_Unit(t *testing.T) {
 		},
 	}
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.name, func(t *testing.T) {
 			t.Parallel()
 			actual := convertProvisionerJob(database.GetProvisionerJobsByIDsWithQueuePositionRow{
diff --git a/coderd/rbac/authz_internal_test.go b/coderd/rbac/authz_internal_test.go
index 9c09837c7915d..838c7bce1c5e8 100644
--- a/coderd/rbac/authz_internal_test.go
+++ b/coderd/rbac/authz_internal_test.go
@@ -243,7 +243,6 @@ func TestFilter(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			actor := tc.Actor
@@ -1135,7 +1134,6 @@ func testAuthorize(t *testing.T, name string, subject Subject, sets ...[]authTes
 	authorizer := NewAuthorizer(prometheus.NewRegistry())
 	for _, cases := range sets {
 		for i, c := range cases {
-			c := c
 			caseName := fmt.Sprintf("%s/%d", name, i)
 			t.Run(caseName, func(t *testing.T) {
 				t.Parallel()
diff --git a/coderd/rbac/object_test.go b/coderd/rbac/object_test.go
index ea6031f2ccae8..ff579b48c03af 100644
--- a/coderd/rbac/object_test.go
+++ b/coderd/rbac/object_test.go
@@ -165,7 +165,6 @@ func TestObjectEqual(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/rbac/regosql/compile_test.go b/coderd/rbac/regosql/compile_test.go
index 208cb920ad1f7..07e8e7245a53e 100644
--- a/coderd/rbac/regosql/compile_test.go
+++ b/coderd/rbac/regosql/compile_test.go
@@ -265,7 +265,6 @@ neq(input.object.owner, "");
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			part := partialQueries(tc.Queries...)
diff --git a/coderd/rbac/regosql/sqltypes/equality_test.go b/coderd/rbac/regosql/sqltypes/equality_test.go
index 17a3d7f45eed1..37922064466de 100644
--- a/coderd/rbac/regosql/sqltypes/equality_test.go
+++ b/coderd/rbac/regosql/sqltypes/equality_test.go
@@ -114,7 +114,6 @@ func TestEquality(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/rbac/regosql/sqltypes/member_test.go b/coderd/rbac/regosql/sqltypes/member_test.go
index 0fedcc176c49f..e933989d7b0df 100644
--- a/coderd/rbac/regosql/sqltypes/member_test.go
+++ b/coderd/rbac/regosql/sqltypes/member_test.go
@@ -92,7 +92,6 @@ func TestMembership(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/rbac/roles_internal_test.go b/coderd/rbac/roles_internal_test.go
index 3f2d0d89fe455..f851280a0417e 100644
--- a/coderd/rbac/roles_internal_test.go
+++ b/coderd/rbac/roles_internal_test.go
@@ -229,7 +229,6 @@ func TestRoleByName(t *testing.T) {
 		}
 
 		for _, c := range testCases {
-			c := c
 			t.Run(c.Role.Identifier.String(), func(t *testing.T) {
 				role, err := RoleByName(c.Role.Identifier)
 				require.NoError(t, err, "role exists")
diff --git a/coderd/rbac/roles_test.go b/coderd/rbac/roles_test.go
index a1b7c7c15d03a..7d6e9d67c923c 100644
--- a/coderd/rbac/roles_test.go
+++ b/coderd/rbac/roles_test.go
@@ -37,7 +37,6 @@ func (a authSubject) Subjects() []authSubject { return []authSubject{a} }
 func TestBuiltInRoles(t *testing.T) {
 	t.Parallel()
 	for _, r := range rbac.SiteBuiltInRoles() {
-		r := r
 		t.Run(r.Identifier.String(), func(t *testing.T) {
 			t.Parallel()
 			require.NoError(t, r.Valid(), "invalid role")
@@ -45,7 +44,6 @@ func TestBuiltInRoles(t *testing.T) {
 	}
 
 	for _, r := range rbac.OrganizationRoles(uuid.New()) {
-		r := r
 		t.Run(r.Identifier.String(), func(t *testing.T) {
 			t.Parallel()
 			require.NoError(t, r.Valid(), "invalid role")
@@ -896,7 +894,6 @@ func TestRolePermissions(t *testing.T) {
 	passed := true
 	// nolint:tparallel,paralleltest
 	for _, c := range testCases {
-		c := c
 		// nolint:tparallel,paralleltest // These share the same remainingPermissions map
 		t.Run(c.Name, func(t *testing.T) {
 			remainingSubjs := make(map[string]struct{})
@@ -995,7 +992,6 @@ func TestIsOrgRole(t *testing.T) {
 
 	// nolint:paralleltest
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Identifier.String(), func(t *testing.T) {
 			t.Parallel()
 			ok := c.Identifier.IsOrgRole()
@@ -1092,7 +1088,6 @@ func TestChangeSet(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/rbac/subject_test.go b/coderd/rbac/subject_test.go
index e2a2f24932c36..c1462b073ec35 100644
--- a/coderd/rbac/subject_test.go
+++ b/coderd/rbac/subject_test.go
@@ -119,7 +119,6 @@ func TestSubjectEqual(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/render/markdown_test.go b/coderd/render/markdown_test.go
index 40f3dae137633..4095cac3f07e7 100644
--- a/coderd/render/markdown_test.go
+++ b/coderd/render/markdown_test.go
@@ -79,8 +79,6 @@ func TestHTML(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/schedule/autostop_test.go b/coderd/schedule/autostop_test.go
index 8b4fe969e59d7..85cc7b533a6ea 100644
--- a/coderd/schedule/autostop_test.go
+++ b/coderd/schedule/autostop_test.go
@@ -486,8 +486,6 @@ func TestCalculateAutoStop(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -622,7 +620,6 @@ func TestFindWeek(t *testing.T) {
 	}
 
 	for _, tz := range timezones {
-		tz := tz
 		t.Run("Loc/"+tz, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/schedule/cron/cron_test.go b/coderd/schedule/cron/cron_test.go
index d3be423eace00..05e8ac21af9de 100644
--- a/coderd/schedule/cron/cron_test.go
+++ b/coderd/schedule/cron/cron_test.go
@@ -141,7 +141,6 @@ func Test_Weekly(t *testing.T) {
 	}
 
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.name, func(t *testing.T) {
 			t.Parallel()
 			actual, err := cron.Weekly(testCase.spec)
diff --git a/coderd/searchquery/search_test.go b/coderd/searchquery/search_test.go
index 5739ecab77525..dd879839e552f 100644
--- a/coderd/searchquery/search_test.go
+++ b/coderd/searchquery/search_test.go
@@ -297,7 +297,6 @@ func TestSearchWorkspace(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 			// TODO: Replace this with the mock database.
@@ -382,7 +381,6 @@ func TestSearchAudit(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 			// Do not use a real database, this is only used for an
@@ -550,7 +548,6 @@ func TestSearchUsers(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 			values, errs := searchquery.Users(c.Query)
@@ -622,7 +619,6 @@ func TestSearchTemplates(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 			// Do not use a real database, this is only used for an
diff --git a/coderd/tailnet_test.go b/coderd/tailnet_test.go
index 28265404c3eae..55b212237479f 100644
--- a/coderd/tailnet_test.go
+++ b/coderd/tailnet_test.go
@@ -257,7 +257,6 @@ func TestServerTailnet_ReverseProxy(t *testing.T) {
 		port := ":4444"
 
 		for i, ag := range agents {
-			i := i
 			ln, err := ag.TailnetConn().Listen("tcp", port)
 			require.NoError(t, err)
 			wln := &wrappedListener{Listener: ln}
diff --git a/coderd/telemetry/telemetry_test.go b/coderd/telemetry/telemetry_test.go
index 498f97362c15b..9338e87d6d31c 100644
--- a/coderd/telemetry/telemetry_test.go
+++ b/coderd/telemetry/telemetry_test.go
@@ -544,7 +544,6 @@ func TestRecordTelemetryStatus(t *testing.T) {
 		{name: "Telemetry was disabled still disabled", recordedTelemetryEnabled: "false", telemetryEnabled: false, shouldReport: false},
 		{name: "Telemetry was disabled still disabled, invalid value", recordedTelemetryEnabled: "invalid", telemetryEnabled: false, shouldReport: false},
 	} {
-		testCase := testCase
 		t.Run(testCase.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/templateversions_test.go b/coderd/templateversions_test.go
index e4027a1f14605..1ad06bae38aee 100644
--- a/coderd/templateversions_test.go
+++ b/coderd/templateversions_test.go
@@ -604,7 +604,6 @@ func TestPostTemplateVersionsByOrganization(t *testing.T) {
 				},
 			},
 		} {
-			tt := tt
 			t.Run(tt.name, func(t *testing.T) {
 				t.Parallel()
 				ctx := testutil.Context(t, testutil.WaitShort)
@@ -1393,7 +1392,6 @@ func TestPaginatedTemplateVersions(t *testing.T) {
 	file, err := client.Upload(egCtx, codersdk.ContentTypeTar, bytes.NewReader(data))
 	require.NoError(t, err)
 	for i := 0; i < total; i++ {
-		i := i
 		eg.Go(func() error {
 			templateVersion, err := client.CreateTemplateVersion(egCtx, user.OrganizationID, codersdk.CreateTemplateVersionRequest{
 				Name:          uuid.NewString(),
@@ -1466,7 +1464,6 @@ func TestPaginatedTemplateVersions(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/tracing/httpmw_test.go b/coderd/tracing/httpmw_test.go
index 0583b29159ee5..ba1e2b879c345 100644
--- a/coderd/tracing/httpmw_test.go
+++ b/coderd/tracing/httpmw_test.go
@@ -77,8 +77,6 @@ func Test_Middleware(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			name := strings.ReplaceAll(strings.TrimPrefix(c.path, "/"), "/", "_")
 			t.Run(name, func(t *testing.T) {
 				t.Parallel()
diff --git a/coderd/updatecheck/updatecheck_test.go b/coderd/updatecheck/updatecheck_test.go
index 3e21309c5ff71..725ceb44d9d6f 100644
--- a/coderd/updatecheck/updatecheck_test.go
+++ b/coderd/updatecheck/updatecheck_test.go
@@ -112,7 +112,6 @@ func TestChecker_Latest(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/updatecheck_test.go b/coderd/updatecheck_test.go
index c81dc0821a152..a81dcd63a2091 100644
--- a/coderd/updatecheck_test.go
+++ b/coderd/updatecheck_test.go
@@ -51,8 +51,6 @@ func TestUpdateCheck_NewVersion(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/userauth_test.go b/coderd/userauth_test.go
index 6d224818a6a46..4c9412fda3fb7 100644
--- a/coderd/userauth_test.go
+++ b/coderd/userauth_test.go
@@ -1473,7 +1473,6 @@ func TestUserOIDC(t *testing.T) {
 			},
 		},
 	} {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			opts := []oidctest.FakeIDPOpt{
diff --git a/coderd/userpassword/userpassword_test.go b/coderd/userpassword/userpassword_test.go
index 41eebf49c974d..83a3bb532e606 100644
--- a/coderd/userpassword/userpassword_test.go
+++ b/coderd/userpassword/userpassword_test.go
@@ -27,7 +27,6 @@ func TestUserPasswordValidate(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			err := userpassword.Validate(tt.password)
@@ -93,7 +92,6 @@ func TestUserPasswordCompare(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			if tt.shouldHash {
diff --git a/coderd/users_test.go b/coderd/users_test.go
index 2e8eb5f3e842e..bd0f138b6a339 100644
--- a/coderd/users_test.go
+++ b/coderd/users_test.go
@@ -1777,7 +1777,6 @@ func TestUsersFilter(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -2461,7 +2460,6 @@ func TestPaginatedUsers(t *testing.T) {
 	eg, _ := errgroup.WithContext(ctx)
 	// Create users
 	for i := 0; i < total; i++ {
-		i := i
 		eg.Go(func() error {
 			email := fmt.Sprintf("%d@coder.com", i)
 			username := fmt.Sprintf("user%d", i)
@@ -2519,7 +2517,6 @@ func TestPaginatedUsers(t *testing.T) {
 		{name: "username search", limit: 3, allUsers: specialUsers, opt: usernameSearch},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(fmt.Sprintf("%s %d", tt.name, tt.limit), func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/util/maps/maps_test.go b/coderd/util/maps/maps_test.go
index 543c100c210a5..f8ad8ddbc4b36 100644
--- a/coderd/util/maps/maps_test.go
+++ b/coderd/util/maps/maps_test.go
@@ -70,7 +70,6 @@ func TestSubset(t *testing.T) {
 			expected: true,
 		},
 	} {
-		tc := tc
 		t.Run("#"+strconv.Itoa(idx), func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/util/strings/strings_test.go b/coderd/util/strings/strings_test.go
index 2db9c9e236e43..5172fb08e1e69 100644
--- a/coderd/util/strings/strings_test.go
+++ b/coderd/util/strings/strings_test.go
@@ -30,7 +30,6 @@ func TestTruncate(t *testing.T) {
 		{"foo", 0, ""},
 		{"foo", -1, ""},
 	} {
-		tt := tt
 		t.Run(tt.expected, func(t *testing.T) {
 			t.Parallel()
 			actual := strings.Truncate(tt.s, tt.n)
diff --git a/coderd/util/xio/limitwriter_test.go b/coderd/util/xio/limitwriter_test.go
index 90d83f81e7d9e..552b38f71f487 100644
--- a/coderd/util/xio/limitwriter_test.go
+++ b/coderd/util/xio/limitwriter_test.go
@@ -107,7 +107,6 @@ func TestLimitWriter(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/workspaceagents_test.go b/coderd/workspaceagents_test.go
index 6d53bd3df1140..b3fb53c228ef8 100644
--- a/coderd/workspaceagents_test.go
+++ b/coderd/workspaceagents_test.go
@@ -1065,7 +1065,6 @@ func TestWorkspaceAgentListeningPorts(t *testing.T) {
 				},
 			},
 		} {
-			tc := tc
 			t.Run("OK_"+tc.name, func(t *testing.T) {
 				t.Parallel()
 
@@ -1340,7 +1339,6 @@ func TestWorkspaceAgentContainers(t *testing.T) {
 				},
 			},
 		} {
-			tc := tc
 			t.Run(tc.name, func(t *testing.T) {
 				t.Parallel()
 
@@ -1692,7 +1690,6 @@ func TestWorkspaceAgent_LifecycleState(t *testing.T) {
 		}
 		//nolint:paralleltest // No race between setting the state and getting the workspace.
 		for _, tt := range tests {
-			tt := tt
 			t.Run(string(tt.state), func(t *testing.T) {
 				state, err := agentsdk.ProtoFromLifecycleState(tt.state)
 				if tt.wantErr {
diff --git a/coderd/workspaceapps/apptest/apptest.go b/coderd/workspaceapps/apptest/apptest.go
index 4e48e60d2d47f..050e5d2fb9a6e 100644
--- a/coderd/workspaceapps/apptest/apptest.go
+++ b/coderd/workspaceapps/apptest/apptest.go
@@ -500,8 +500,6 @@ func Run(t *testing.T, appHostIsPrimary bool, factory DeploymentFactory) {
 			}
 
 			for _, c := range cases {
-				c := c
-
 				if c.name == "Path" && appHostIsPrimary {
 					// Workspace application auth does not apply to path apps
 					// served from the primary access URL as no smuggling needs
@@ -1686,8 +1684,6 @@ func Run(t *testing.T, appHostIsPrimary bool, factory DeploymentFactory) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			t.Run(c.name, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/coderd/workspaceapps/appurl/appurl_test.go b/coderd/workspaceapps/appurl/appurl_test.go
index 3924949cb30ad..9dfdb4452cdb9 100644
--- a/coderd/workspaceapps/appurl/appurl_test.go
+++ b/coderd/workspaceapps/appurl/appurl_test.go
@@ -56,7 +56,6 @@ func TestApplicationURLString(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -158,7 +157,6 @@ func TestParseSubdomainAppURL(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -378,7 +376,6 @@ func TestCompileHostnamePattern(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -390,7 +387,6 @@ func TestCompileHostnamePattern(t *testing.T) {
 				require.Equal(t, expected, regex.String(), "generated regex does not match")
 
 				for i, m := range c.matchCases {
-					m := m
 					t.Run(fmt.Sprintf("MatchCase%d", i), func(t *testing.T) {
 						t.Parallel()
 
@@ -459,7 +455,6 @@ func TestConvertAppURLForCSP(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 			require.Equal(t, c.expected, appurl.ConvertAppHostForCSP(c.host, c.wildcard))
diff --git a/coderd/workspaceapps/db_test.go b/coderd/workspaceapps/db_test.go
index 597d1daadfa54..a1f3fb452fbe5 100644
--- a/coderd/workspaceapps/db_test.go
+++ b/coderd/workspaceapps/db_test.go
@@ -270,8 +270,6 @@ func Test_ResolveRequest(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
-
 			t.Run(c.name, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/coderd/workspaceapps/request_test.go b/coderd/workspaceapps/request_test.go
index fbabc840745e9..f1b0df6ae064a 100644
--- a/coderd/workspaceapps/request_test.go
+++ b/coderd/workspaceapps/request_test.go
@@ -272,7 +272,6 @@ func Test_RequestValidate(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 			req := c.req
diff --git a/coderd/workspaceapps/stats_test.go b/coderd/workspaceapps/stats_test.go
index 51a6d9eebf169..c98be2eb79142 100644
--- a/coderd/workspaceapps/stats_test.go
+++ b/coderd/workspaceapps/stats_test.go
@@ -280,7 +280,6 @@ func TestStatsCollector(t *testing.T) {
 
 	// Run tests.
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/workspaceapps/token_test.go b/coderd/workspaceapps/token_test.go
index db070268fa196..94ee128bd9079 100644
--- a/coderd/workspaceapps/token_test.go
+++ b/coderd/workspaceapps/token_test.go
@@ -273,8 +273,6 @@ func Test_TokenMatchesRequest(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/workspaceapps_test.go b/coderd/workspaceapps_test.go
index 91950ac855a1f..8db2858e01e32 100644
--- a/coderd/workspaceapps_test.go
+++ b/coderd/workspaceapps_test.go
@@ -57,7 +57,6 @@ func TestGetAppHost(t *testing.T) {
 		},
 	}
 	for _, c := range cases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -182,7 +181,6 @@ func TestWorkspaceApplicationAuth(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/coderd/workspaces_test.go b/coderd/workspaces_test.go
index daabb12c25e14..1d02622d455e8 100644
--- a/coderd/workspaces_test.go
+++ b/coderd/workspaces_test.go
@@ -652,7 +652,6 @@ func TestWorkspace(t *testing.T) {
 		}
 
 		for _, tc := range testCases {
-			tc := tc // Capture range variable
 			t.Run(tc.name, func(t *testing.T) {
 				t.Parallel()
 
@@ -1802,7 +1801,6 @@ func TestWorkspaceFilter(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 			workspaces, err := client.Workspaces(ctx, c.Filter)
@@ -2583,7 +2581,6 @@ func TestWorkspaceUpdateAutostart(t *testing.T) {
 	}
 
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.name, func(t *testing.T) {
 			t.Parallel()
 			var (
@@ -2763,7 +2760,6 @@ func TestWorkspaceUpdateTTL(t *testing.T) {
 	}
 
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -2864,8 +2860,6 @@ func TestWorkspaceUpdateTTL(t *testing.T) {
 		}
 
 		for _, testCase := range testCases {
-			testCase := testCase
-
 			t.Run(testCase.name, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/coderd/workspacestats/activitybump_test.go b/coderd/workspacestats/activitybump_test.go
index ccee299a46548..d778e2fbd0f8a 100644
--- a/coderd/workspacestats/activitybump_test.go
+++ b/coderd/workspacestats/activitybump_test.go
@@ -158,9 +158,7 @@ func Test_ActivityBumpWorkspace(t *testing.T) {
 			expectedBump:         0,
 		},
 	} {
-		tt := tt
 		for _, tz := range timezones {
-			tz := tz
 			t.Run(tt.name+"/"+tz, func(t *testing.T) {
 				t.Parallel()
 				nextAutostart := tt.nextAutostart
diff --git a/codersdk/agentsdk/logs_test.go b/codersdk/agentsdk/logs_test.go
index 2b3b934c8db3c..05e4bc574efde 100644
--- a/codersdk/agentsdk/logs_test.go
+++ b/codersdk/agentsdk/logs_test.go
@@ -168,7 +168,6 @@ func TestStartupLogsWriter_Write(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -253,7 +252,6 @@ func TestStartupLogsSender(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/codersdk/client_internal_test.go b/codersdk/client_internal_test.go
index 0650c3c32097d..cfd8bdbf26086 100644
--- a/codersdk/client_internal_test.go
+++ b/codersdk/client_internal_test.go
@@ -76,8 +76,6 @@ func TestIsConnectionErr(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -298,7 +296,6 @@ func Test_readBodyAsError(t *testing.T) {
 	}
 
 	for _, c := range tests {
-		c := c
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/codersdk/deployment_internal_test.go b/codersdk/deployment_internal_test.go
index 09ee7f2a2cc71..d350447fd638a 100644
--- a/codersdk/deployment_internal_test.go
+++ b/codersdk/deployment_internal_test.go
@@ -28,8 +28,6 @@ func TestRemoveTrailingVersionInfo(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
-
 		stripped := removeTrailingVersionInfo(tc.Version)
 		require.Equal(t, tc.ExpectedAfterStrippingInfo, stripped)
 	}
diff --git a/codersdk/deployment_test.go b/codersdk/deployment_test.go
index 1d2af676596d3..c18e5775f7ae9 100644
--- a/codersdk/deployment_test.go
+++ b/codersdk/deployment_test.go
@@ -196,7 +196,6 @@ func TestSSHConfig_ParseOptions(t *testing.T) {
 	}
 
 	for _, tt := range testCases {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 			c := codersdk.SSHConfig{
@@ -277,7 +276,6 @@ func TestTimezoneOffsets(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -524,8 +522,6 @@ func TestFeatureComparison(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
-
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
@@ -619,8 +615,6 @@ func TestNotificationsCanBeDisabled(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/codersdk/healthsdk/healthsdk_test.go b/codersdk/healthsdk/healthsdk_test.go
index 517837e20a2de..4a062da03f24d 100644
--- a/codersdk/healthsdk/healthsdk_test.go
+++ b/codersdk/healthsdk/healthsdk_test.go
@@ -148,7 +148,6 @@ func TestSummarize(t *testing.T) {
 			},
 		},
 	} {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			actual := tt.br.Summarize(tt.pfx, tt.docsURL)
diff --git a/codersdk/healthsdk/interfaces_internal_test.go b/codersdk/healthsdk/interfaces_internal_test.go
index f870e543166e1..e5c3978383b35 100644
--- a/codersdk/healthsdk/interfaces_internal_test.go
+++ b/codersdk/healthsdk/interfaces_internal_test.go
@@ -160,7 +160,6 @@ func Test_generateInterfacesReport(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			r := generateInterfacesReport(&tc.state)
diff --git a/codersdk/name_test.go b/codersdk/name_test.go
index 487f3778ac70e..b4903846c4c23 100644
--- a/codersdk/name_test.go
+++ b/codersdk/name_test.go
@@ -60,7 +60,6 @@ func TestUsernameValid(t *testing.T) {
 		{"123456789012345678901234567890123123456789012345678901234567890123", false},
 	}
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.Username, func(t *testing.T) {
 			t.Parallel()
 			valid := codersdk.NameValid(testCase.Username)
@@ -115,7 +114,6 @@ func TestTemplateDisplayNameValid(t *testing.T) {
 		{"12345678901234567890123456789012345678901234567890123456789012345", false},
 	}
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.Name, func(t *testing.T) {
 			t.Parallel()
 			valid := codersdk.DisplayNameValid(testCase.Name)
@@ -156,7 +154,6 @@ func TestTemplateVersionNameValid(t *testing.T) {
 		{"!!!!1 ?????", false},
 	}
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.Name, func(t *testing.T) {
 			t.Parallel()
 			valid := codersdk.TemplateVersionNameValid(testCase.Name)
@@ -197,7 +194,6 @@ func TestFrom(t *testing.T) {
 		{"", ""},
 	}
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.From, func(t *testing.T) {
 			t.Parallel()
 			converted := codersdk.UsernameFrom(testCase.From)
@@ -243,7 +239,6 @@ func TestUserRealNameValid(t *testing.T) {
 		{strings.Repeat("a", 129), false},
 	}
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.Name, func(t *testing.T) {
 			t.Parallel()
 			err := codersdk.UserRealNameValid(testCase.Name)
@@ -277,7 +272,6 @@ func TestGroupNameValid(t *testing.T) {
 		{random256String, false},
 	}
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.Name, func(t *testing.T) {
 			t.Parallel()
 			err := codersdk.GroupNameValid(testCase.Name)
diff --git a/codersdk/pagination_test.go b/codersdk/pagination_test.go
index 53a3fcaebceb4..e5bb8002743f9 100644
--- a/codersdk/pagination_test.go
+++ b/codersdk/pagination_test.go
@@ -42,7 +42,6 @@ func TestPagination_asRequestOption(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/codersdk/richparameters_test.go b/codersdk/richparameters_test.go
index 5635a82beb6c6..66f23416115bd 100644
--- a/codersdk/richparameters_test.go
+++ b/codersdk/richparameters_test.go
@@ -322,7 +322,6 @@ func TestRichParameterValidation(t *testing.T) {
 		}
 
 		for _, tc := range tests {
-			tc := tc
 			t.Run(tc.parameterName+"-"+tc.value, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/codersdk/time_test.go b/codersdk/time_test.go
index a2d3b20622ba7..fd5314538d3d9 100644
--- a/codersdk/time_test.go
+++ b/codersdk/time_test.go
@@ -47,7 +47,6 @@ func TestNullTime_MarshalJSON(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -104,7 +103,6 @@ func TestNullTime_UnmarshalJSON(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -145,7 +143,6 @@ func TestNullTime_IsZero(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/codersdk/workspacedisplaystatus_internal_test.go b/codersdk/workspacedisplaystatus_internal_test.go
index 2b910c89835fb..68e718a5f4cde 100644
--- a/codersdk/workspacedisplaystatus_internal_test.go
+++ b/codersdk/workspacedisplaystatus_internal_test.go
@@ -90,7 +90,6 @@ func TestWorkspaceDisplayStatus(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			if got := WorkspaceDisplayStatus(tt.jobStatus, tt.transition); got != tt.want {
diff --git a/cryptorand/strings_test.go b/cryptorand/strings_test.go
index 8557667457a6c..4a24f907a2dc8 100644
--- a/cryptorand/strings_test.go
+++ b/cryptorand/strings_test.go
@@ -92,7 +92,6 @@ func TestStringCharset(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/audit/audit_test.go b/enterprise/audit/audit_test.go
index 6d825306c3346..bf9393612d65c 100644
--- a/enterprise/audit/audit_test.go
+++ b/enterprise/audit/audit_test.go
@@ -84,7 +84,6 @@ func TestAuditor(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/audit/diff_internal_test.go b/enterprise/audit/diff_internal_test.go
index d5c191c8907fa..afbd1b37844cc 100644
--- a/enterprise/audit/diff_internal_test.go
+++ b/enterprise/audit/diff_internal_test.go
@@ -417,7 +417,6 @@ func runDiffTests(t *testing.T, tests []diffTest) {
 	t.Helper()
 
 	for _, test := range tests {
-		test := test
 		typName := reflect.TypeOf(test.left).Name()
 		t.Run(typName+"/"+test.name, func(t *testing.T) {
 			t.Parallel()
diff --git a/enterprise/cli/start_test.go b/enterprise/cli/start_test.go
index dd86b20d44fb6..b68a95ae1131d 100644
--- a/enterprise/cli/start_test.go
+++ b/enterprise/cli/start_test.go
@@ -121,11 +121,9 @@ func TestStart(t *testing.T) {
 		}
 
 		for _, cmd := range []string{"start", "restart"} {
-			cmd := cmd
 			t.Run(cmd, func(t *testing.T) {
 				t.Parallel()
 				for _, c := range cases {
-					c := c
 					t.Run(c.Name, func(t *testing.T) {
 						t.Parallel()
 
diff --git a/enterprise/coderd/authorize_test.go b/enterprise/coderd/authorize_test.go
index 670df18916aaa..d64cdb58c2e8e 100644
--- a/enterprise/coderd/authorize_test.go
+++ b/enterprise/coderd/authorize_test.go
@@ -96,8 +96,6 @@ func TestCheckACLPermissions(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
-
 		t.Run("CheckAuthorization/"+c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/coderd_test.go b/enterprise/coderd/coderd_test.go
index 446fce042d70f..1c8c863db040b 100644
--- a/enterprise/coderd/coderd_test.go
+++ b/enterprise/coderd/coderd_test.go
@@ -292,8 +292,6 @@ func TestEntitlements_Prebuilds(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		tc := tc
-
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -618,7 +616,6 @@ func TestSCIMDisabled(t *testing.T) {
 	}
 
 	for _, p := range checkPaths {
-		p := p
 		t.Run(p, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/enidpsync/organizations_test.go b/enterprise/coderd/enidpsync/organizations_test.go
index b2e120592b582..d2a5aafece558 100644
--- a/enterprise/coderd/enidpsync/organizations_test.go
+++ b/enterprise/coderd/enidpsync/organizations_test.go
@@ -296,7 +296,6 @@ func TestOrganizationSync(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitMedium)
diff --git a/enterprise/coderd/httpmw/provisionerdaemon_test.go b/enterprise/coderd/httpmw/provisionerdaemon_test.go
index 84da7f546fa35..4d9575c72491a 100644
--- a/enterprise/coderd/httpmw/provisionerdaemon_test.go
+++ b/enterprise/coderd/httpmw/provisionerdaemon_test.go
@@ -126,7 +126,6 @@ func TestExtractProvisionerDaemonAuthenticated(t *testing.T) {
 	}
 
 	for _, test := range tests {
-		test := test
 		t.Run(test.name, func(t *testing.T) {
 			t.Parallel()
 			routeCtx := chi.NewRouteContext()
diff --git a/enterprise/coderd/insights_test.go b/enterprise/coderd/insights_test.go
index 044c5988eb036..d38eefc593926 100644
--- a/enterprise/coderd/insights_test.go
+++ b/enterprise/coderd/insights_test.go
@@ -34,7 +34,6 @@ func TestTemplateInsightsWithTemplateAdminACL(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(fmt.Sprintf("with interval=%q", tt.interval), func(t *testing.T) {
 			t.Parallel()
 
@@ -94,7 +93,6 @@ func TestTemplateInsightsWithRole(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(fmt.Sprintf("with interval=%q role=%q", tt.interval, tt.role), func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/license/license_test.go b/enterprise/coderd/license/license_test.go
index 184a611c40949..bf6d6448205e0 100644
--- a/enterprise/coderd/license/license_test.go
+++ b/enterprise/coderd/license/license_test.go
@@ -848,8 +848,6 @@ func TestLicenseEntitlements(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
-
 		t.Run(tc.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/prebuilds/claim_test.go b/enterprise/coderd/prebuilds/claim_test.go
index 83933f3a98cd3..ec1d6dbbd5a98 100644
--- a/enterprise/coderd/prebuilds/claim_test.go
+++ b/enterprise/coderd/prebuilds/claim_test.go
@@ -128,7 +128,6 @@ func TestClaimPrebuild(t *testing.T) {
 	for name, tc := range cases {
 		// Ensure that prebuilt workspaces can be claimed in non-default organizations:
 		for _, useDefaultOrg := range []bool{true, false} {
-			tc := tc
 			t.Run(name, func(t *testing.T) {
 				t.Parallel()
 
diff --git a/enterprise/coderd/prebuilds/membership_test.go b/enterprise/coderd/prebuilds/membership_test.go
index 229814e5bf764..82d2abf92a4d8 100644
--- a/enterprise/coderd/prebuilds/membership_test.go
+++ b/enterprise/coderd/prebuilds/membership_test.go
@@ -56,7 +56,6 @@ func TestReconcileAll(t *testing.T) {
 	}
 
 	for _, tc := range tests {
-		tc := tc // capture
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/prebuilds/metricscollector_test.go b/enterprise/coderd/prebuilds/metricscollector_test.go
index 7befffe9d3a05..3b8461979c87a 100644
--- a/enterprise/coderd/prebuilds/metricscollector_test.go
+++ b/enterprise/coderd/prebuilds/metricscollector_test.go
@@ -176,19 +176,12 @@ func TestMetricsCollector(t *testing.T) {
 		},
 	}
 	for _, test := range tests {
-		test := test // capture for parallel
 		for _, transition := range test.transitions {
-			transition := transition // capture for parallel
 			for _, jobStatus := range test.jobStatuses {
-				jobStatus := jobStatus // capture for parallel
 				for _, initiatorID := range test.initiatorIDs {
-					initiatorID := initiatorID // capture for parallel
 					for _, ownerID := range test.ownerIDs {
-						ownerID := ownerID // capture for parallel
 						for _, templateDeleted := range test.templateDeleted {
-							templateDeleted := templateDeleted // capture for parallel
 							for _, eligible := range test.eligible {
-								eligible := eligible // capture for parallel
 								t.Run(fmt.Sprintf("%v/transition:%s/jobStatus:%s", test.name, transition, jobStatus), func(t *testing.T) {
 									t.Parallel()
 
@@ -259,7 +252,6 @@ func TestMetricsCollector(t *testing.T) {
 										require.Equal(t, 1, len(presets))
 
 										for _, preset := range presets {
-											preset := preset // capture for parallel
 											labels := map[string]string{
 												"template_name":     template.Name,
 												"preset_name":       preset.Name,
diff --git a/enterprise/coderd/prebuilds/reconcile_test.go b/enterprise/coderd/prebuilds/reconcile_test.go
index 540ec1088ac0c..de8c65546334e 100644
--- a/enterprise/coderd/prebuilds/reconcile_test.go
+++ b/enterprise/coderd/prebuilds/reconcile_test.go
@@ -308,7 +308,6 @@ func TestPrebuildReconciliation(t *testing.T) {
 		},
 	}
 	for _, tc := range testCases {
-		tc := tc // capture for parallel
 		for _, templateVersionActive := range tc.templateVersionActive {
 			for _, prebuildLatestTransition := range tc.prebuildLatestTransitions {
 				for _, prebuildJobStatus := range tc.prebuildJobStatuses {
diff --git a/enterprise/coderd/provisionerdaemons_test.go b/enterprise/coderd/provisionerdaemons_test.go
index cdc6267d90971..a94a60ffff3c2 100644
--- a/enterprise/coderd/provisionerdaemons_test.go
+++ b/enterprise/coderd/provisionerdaemons_test.go
@@ -921,7 +921,6 @@ func TestGetProvisionerDaemons(t *testing.T) {
 			},
 		}
 		for _, tt := range testCases {
-			tt := tt
 			t.Run(tt.name, func(t *testing.T) {
 				t.Parallel()
 				dv := coderdtest.DeploymentValues(t)
diff --git a/enterprise/coderd/provisionerkeys_test.go b/enterprise/coderd/provisionerkeys_test.go
index e3f5839bf8b02..daca6625d620f 100644
--- a/enterprise/coderd/provisionerkeys_test.go
+++ b/enterprise/coderd/provisionerkeys_test.go
@@ -167,7 +167,6 @@ func TestGetProvisionerKey(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/roles_test.go b/enterprise/coderd/roles_test.go
index 57b66a368248c..70c432755f7fa 100644
--- a/enterprise/coderd/roles_test.go
+++ b/enterprise/coderd/roles_test.go
@@ -517,7 +517,6 @@ func TestListRoles(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/schedule/template_test.go b/enterprise/coderd/schedule/template_test.go
index 712fa032c8c1b..4af06042b031f 100644
--- a/enterprise/coderd/schedule/template_test.go
+++ b/enterprise/coderd/schedule/template_test.go
@@ -191,8 +191,6 @@ func TestTemplateUpdateBuildDeadlines(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -778,8 +776,6 @@ func TestTemplateTTL(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/templates_test.go b/enterprise/coderd/templates_test.go
index b6c2048190e9a..6c7a20f85a642 100644
--- a/enterprise/coderd/templates_test.go
+++ b/enterprise/coderd/templates_test.go
@@ -470,8 +470,6 @@ func TestTemplates(t *testing.T) {
 			}
 
 			for _, c := range cases {
-				c := c
-
 				// nolint: paralleltest // context is from parent t.Run
 				t.Run(c.Name, func(t *testing.T) {
 					_, err := anotherClient.UpdateTemplateMeta(ctx, template.ID, codersdk.UpdateTemplateMeta{
diff --git a/enterprise/coderd/userauth_test.go b/enterprise/coderd/userauth_test.go
index 267e1168f84cf..46207f319dbe1 100644
--- a/enterprise/coderd/userauth_test.go
+++ b/enterprise/coderd/userauth_test.go
@@ -902,7 +902,6 @@ func TestGroupSync(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			runner := setupOIDCTest(t, oidcTestConfig{
diff --git a/enterprise/coderd/users_test.go b/enterprise/coderd/users_test.go
index 5aa1ab1e8215c..7cfef59fa9e5f 100644
--- a/enterprise/coderd/users_test.go
+++ b/enterprise/coderd/users_test.go
@@ -426,7 +426,6 @@ func TestGrantSiteRoles(t *testing.T) {
 	}
 
 	for _, c := range testCases {
-		c := c
 		t.Run(c.Name, func(t *testing.T) {
 			t.Parallel()
 			ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitLong)
diff --git a/enterprise/coderd/workspaceproxy_internal_test.go b/enterprise/coderd/workspaceproxy_internal_test.go
index 9654e0ecc3e2f..1bb84b4026ca6 100644
--- a/enterprise/coderd/workspaceproxy_internal_test.go
+++ b/enterprise/coderd/workspaceproxy_internal_test.go
@@ -47,7 +47,6 @@ func Test_validateProxyURL(t *testing.T) {
 	}
 
 	for _, tt := range testcases {
-		tt := tt
 		t.Run(tt.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/enterprise/coderd/workspaces_test.go b/enterprise/coderd/workspaces_test.go
index a1be6a3701393..e8a29ccc33959 100644
--- a/enterprise/coderd/workspaces_test.go
+++ b/enterprise/coderd/workspaces_test.go
@@ -1952,7 +1952,6 @@ func TestWorkspaceTagsTerraform(t *testing.T) {
 				}`,
 		},
 	} {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			client, owner := coderdenttest.New(t, &coderdenttest.Options{
 				Options: &coderdtest.Options{
diff --git a/enterprise/provisionerd/remoteprovisioners_test.go b/enterprise/provisionerd/remoteprovisioners_test.go
index 5d0de5ae396b7..7b89d696ee20e 100644
--- a/enterprise/provisionerd/remoteprovisioners_test.go
+++ b/enterprise/provisionerd/remoteprovisioners_test.go
@@ -33,7 +33,6 @@ func TestRemoteConnector_Mainline(t *testing.T) {
 		{name: "Smokescreen", smokescreen: true},
 	}
 	for _, tc := range cases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			ctx, cancel := context.WithTimeout(context.Background(), testutil.WaitMedium)
diff --git a/enterprise/wsproxy/wsproxy_test.go b/enterprise/wsproxy/wsproxy_test.go
index 65de627a1fb06..99cb5c60545f9 100644
--- a/enterprise/wsproxy/wsproxy_test.go
+++ b/enterprise/wsproxy/wsproxy_test.go
@@ -282,7 +282,6 @@ resourceLoop:
 
 		// Connect to each region.
 		for _, r := range connInfo.DERPMap.Regions {
-			r := r
 			if len(r.Nodes) == 1 && r.Nodes[0].STUNOnly {
 				// Skip STUN-only regions.
 				continue
@@ -654,7 +653,6 @@ func TestWorkspaceProxyDERPMeshProbe(t *testing.T) {
 			replicaPingDone = [count]bool{}
 		)
 		for i := range proxies {
-			i := i
 			proxies[i] = coderdenttest.NewWorkspaceProxyReplica(t, api, client, &coderdenttest.ProxyOptions{
 				Name:     "proxy-1",
 				Token:    sessionToken,
diff --git a/examples/examples_test.go b/examples/examples_test.go
index 1a558b6506c73..779835eec66d5 100644
--- a/examples/examples_test.go
+++ b/examples/examples_test.go
@@ -19,7 +19,6 @@ func TestTemplate(t *testing.T) {
 	require.NoError(t, err, "error listing examples, run \"make gen\" to ensure examples are up to date")
 	require.NotEmpty(t, list)
 	for _, eg := range list {
-		eg := eg
 		t.Run(eg.ID, func(t *testing.T) {
 			t.Parallel()
 			assert.NotEmpty(t, eg.ID, "example ID should not be empty")
diff --git a/helm/coder/tests/chart_test.go b/helm/coder/tests/chart_test.go
index 638b9e5005d6f..a11d631a2f247 100644
--- a/helm/coder/tests/chart_test.go
+++ b/helm/coder/tests/chart_test.go
@@ -163,10 +163,7 @@ func TestRenderChart(t *testing.T) {
 	require.NoError(t, err, "failed to build Helm dependencies")
 
 	for _, tc := range testCases {
-		tc := tc
-
 		for _, ns := range namespaces {
-			tc := tc
 			tc.namespace = ns
 
 			t.Run(tc.namespace+"/"+tc.name, func(t *testing.T) {
@@ -213,14 +210,12 @@ func TestUpdateGoldenFiles(t *testing.T) {
 	require.NoError(t, err, "failed to build Helm dependencies")
 
 	for _, tc := range testCases {
-		tc := tc
 		if tc.expectedError != "" {
 			t.Logf("skipping test case %q with render error", tc.name)
 			continue
 		}
 
 		for _, ns := range namespaces {
-			tc := tc
 			tc.namespace = ns
 
 			valuesPath := tc.valuesFilePath()
diff --git a/helm/provisioner/tests/chart_test.go b/helm/provisioner/tests/chart_test.go
index a6f3ba7370bac..8b0cc5cabaa1e 100644
--- a/helm/provisioner/tests/chart_test.go
+++ b/helm/provisioner/tests/chart_test.go
@@ -141,9 +141,7 @@ func TestRenderChart(t *testing.T) {
 	require.NoError(t, err, "failed to build Helm dependencies")
 
 	for _, tc := range testCases {
-		tc := tc
 		for _, ns := range namespaces {
-			tc := tc
 			tc.namespace = ns
 
 			t.Run(tc.namespace+"/"+tc.name, func(t *testing.T) {
@@ -190,14 +188,12 @@ func TestUpdateGoldenFiles(t *testing.T) {
 	require.NoError(t, err, "failed to build Helm dependencies")
 
 	for _, tc := range testCases {
-		tc := tc
 		if tc.expectedError != "" {
 			t.Logf("skipping test case %q with render error", tc.name)
 			continue
 		}
 
 		for _, ns := range namespaces {
-			tc := tc
 			tc.namespace = ns
 
 			valuesPath := tc.valuesFilePath()
diff --git a/provisioner/terraform/diagnostic_test.go b/provisioner/terraform/diagnostic_test.go
index 8727256b75376..0fd353ae540a5 100644
--- a/provisioner/terraform/diagnostic_test.go
+++ b/provisioner/terraform/diagnostic_test.go
@@ -47,8 +47,6 @@ func TestFormatDiagnostic(t *testing.T) {
 	}
 
 	for name, tc := range tests {
-		tc := tc
-
 		t.Run(name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/provisioner/terraform/executor_internal_test.go b/provisioner/terraform/executor_internal_test.go
index 97cb5285372f2..a39d8758893b8 100644
--- a/provisioner/terraform/executor_internal_test.go
+++ b/provisioner/terraform/executor_internal_test.go
@@ -157,8 +157,6 @@ func TestOnlyDataResources(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
-
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/provisioner/terraform/parse_test.go b/provisioner/terraform/parse_test.go
index 7d176cb886469..d2a505235f688 100644
--- a/provisioner/terraform/parse_test.go
+++ b/provisioner/terraform/parse_test.go
@@ -376,7 +376,6 @@ func TestParse(t *testing.T) {
 	}
 
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/provisioner/terraform/provision_test.go b/provisioner/terraform/provision_test.go
index 505fd2df41400..dc4545d137e89 100644
--- a/provisioner/terraform/provision_test.go
+++ b/provisioner/terraform/provision_test.go
@@ -312,7 +312,6 @@ func TestProvision_Cancel(t *testing.T) {
 		},
 	}
 	for _, tt := range tests {
-		tt := tt
 		// below we exec fake_cancel.sh, which causes the kernel to execute it, and if more than
 		// one process tries to do this, it can cause "text file busy"
 		// nolint: paralleltest
@@ -1067,7 +1066,6 @@ func TestProvision(t *testing.T) {
 	}
 
 	for _, testCase := range testCases {
-		testCase := testCase
 		t.Run(testCase.Name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/provisioner/terraform/resources_test.go b/provisioner/terraform/resources_test.go
index 772256032be3c..d21c0a9c573ff 100644
--- a/provisioner/terraform/resources_test.go
+++ b/provisioner/terraform/resources_test.go
@@ -930,8 +930,6 @@ func TestConvertResources(t *testing.T) {
 			},
 		},
 	} {
-		folderName := folderName
-		expected := expected
 		t.Run(folderName, func(t *testing.T) {
 			t.Parallel()
 			dir := filepath.Join(filepath.Dir(filename), "testdata", "resources", folderName)
@@ -1114,7 +1112,6 @@ func TestAppSlugValidation(t *testing.T) {
 
 	//nolint:paralleltest
 	for i, c := range cases {
-		c := c
 		t.Run(fmt.Sprintf("case-%d", i), func(t *testing.T) {
 			// Change the first app slug to match the current case.
 			for _, resource := range tfPlan.PlannedValues.RootModule.Resources {
@@ -1191,7 +1188,6 @@ func TestAgentNameInvalid(t *testing.T) {
 
 	//nolint:paralleltest
 	for i, c := range cases {
-		c := c
 		t.Run(fmt.Sprintf("case-%d", i), func(t *testing.T) {
 			// Change the first agent name to match the current case.
 			for _, resource := range tfPlan.PlannedValues.RootModule.Resources {
@@ -1343,7 +1339,6 @@ func TestInstanceTypeAssociation(t *testing.T) {
 		ResourceType:    "azurerm_windows_virtual_machine",
 		InstanceTypeKey: "size",
 	}} {
-		tc := tc
 		t.Run(tc.ResourceType, func(t *testing.T) {
 			t.Parallel()
 			ctx, logger := ctxAndLogger(t)
@@ -1402,7 +1397,6 @@ func TestInstanceIDAssociation(t *testing.T) {
 		ResourceType:  "azurerm_windows_virtual_machine",
 		InstanceIDKey: "virtual_machine_id",
 	}} {
-		tc := tc
 		t.Run(tc.ResourceType, func(t *testing.T) {
 			t.Parallel()
 			ctx, logger := ctxAndLogger(t)
diff --git a/provisioner/terraform/tfparse/tfparse_test.go b/provisioner/terraform/tfparse/tfparse_test.go
index ceefc484b2169..41182b9aa2dac 100644
--- a/provisioner/terraform/tfparse/tfparse_test.go
+++ b/provisioner/terraform/tfparse/tfparse_test.go
@@ -587,7 +587,6 @@ func Test_WorkspaceTagDefaultsFromFile(t *testing.T) {
 			expectTags: map[string]string{"foo": "bar", "a": "1"},
 		},
 	} {
-		tc := tc
 		t.Run(tc.name+"/tar", func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitShort)
diff --git a/provisionersdk/provisionertags_test.go b/provisionersdk/provisionertags_test.go
index 70e05473eecc0..070285aea6c50 100644
--- a/provisionersdk/provisionertags_test.go
+++ b/provisionersdk/provisionertags_test.go
@@ -185,7 +185,6 @@ func TestMutateTags(t *testing.T) {
 			},
 		},
 	} {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			got := provisionersdk.MutateTags(tt.userID, tt.tags...)
diff --git a/pty/ptytest/ptytest_test.go b/pty/ptytest/ptytest_test.go
index 2b1b5570b18ea..29011ba9e7e61 100644
--- a/pty/ptytest/ptytest_test.go
+++ b/pty/ptytest/ptytest_test.go
@@ -56,7 +56,6 @@ func TestPtytest(t *testing.T) {
 			{name: "10241 large output", output: strings.Repeat(".", 10241)}, // 1024 * 10 + 1
 		}
 		for _, tt := range tests {
-			tt := tt
 			// nolint:paralleltest // Avoid parallel test to more easily identify the issue.
 			t.Run(tt.name, func(t *testing.T) {
 				cmd := &serpent.Command{
diff --git a/scaletest/agentconn/config_test.go b/scaletest/agentconn/config_test.go
index 5f5cdf7c53da7..412d7f6926119 100644
--- a/scaletest/agentconn/config_test.go
+++ b/scaletest/agentconn/config_test.go
@@ -167,8 +167,6 @@ func Test_Config(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/scaletest/createworkspaces/config_test.go b/scaletest/createworkspaces/config_test.go
index 6a3d9e8104624..3965e9f9dfb69 100644
--- a/scaletest/createworkspaces/config_test.go
+++ b/scaletest/createworkspaces/config_test.go
@@ -63,8 +63,6 @@ func Test_UserConfig(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
@@ -177,8 +175,6 @@ func Test_Config(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/scaletest/harness/strategies.go b/scaletest/harness/strategies.go
index 24bb04e871880..7d5067a4e1eb3 100644
--- a/scaletest/harness/strategies.go
+++ b/scaletest/harness/strategies.go
@@ -122,7 +122,6 @@ var _ ExecutionStrategy = TimeoutExecutionStrategyWrapper{}
 func (t TimeoutExecutionStrategyWrapper) Run(ctx context.Context, fns []TestFn) ([]error, error) {
 	newFns := make([]TestFn, len(fns))
 	for i, fn := range fns {
-		fn := fn
 		newFns[i] = func(ctx context.Context) error {
 			ctx, cancel := context.WithTimeout(ctx, t.Timeout)
 			defer cancel()
diff --git a/scaletest/harness/strategies_test.go b/scaletest/harness/strategies_test.go
index 0858b5bf71da1..b18036a7931d3 100644
--- a/scaletest/harness/strategies_test.go
+++ b/scaletest/harness/strategies_test.go
@@ -186,8 +186,6 @@ func strategyTestData(count int, runFn func(ctx context.Context, i int, logs io.
 		fns  = make([]harness.TestFn, count)
 	)
 	for i := 0; i < count; i++ {
-		i := i
-
 		runs[i] = harness.NewTestRun("test", strconv.Itoa(i), testFns{
 			RunFn: func(ctx context.Context, id string, logs io.Writer) error {
 				if runFn != nil {
diff --git a/scaletest/placebo/config_test.go b/scaletest/placebo/config_test.go
index 8e3a40000a02e..84458c28a8d8e 100644
--- a/scaletest/placebo/config_test.go
+++ b/scaletest/placebo/config_test.go
@@ -98,8 +98,6 @@ func Test_Config(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/scaletest/reconnectingpty/config_test.go b/scaletest/reconnectingpty/config_test.go
index e0712b4631097..1b7646ad744d9 100644
--- a/scaletest/reconnectingpty/config_test.go
+++ b/scaletest/reconnectingpty/config_test.go
@@ -61,8 +61,6 @@ func Test_Config(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/scaletest/workspacebuild/config_test.go b/scaletest/workspacebuild/config_test.go
index b9c427f104f3d..c80b48df9055c 100644
--- a/scaletest/workspacebuild/config_test.go
+++ b/scaletest/workspacebuild/config_test.go
@@ -78,8 +78,6 @@ func Test_Config(t *testing.T) {
 	}
 
 	for _, c := range cases {
-		c := c
-
 		t.Run(c.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/scripts/apitypings/main_test.go b/scripts/apitypings/main_test.go
index 0ac20363327c3..1bb89c7ba5423 100644
--- a/scripts/apitypings/main_test.go
+++ b/scripts/apitypings/main_test.go
@@ -31,7 +31,6 @@ func TestGeneration(t *testing.T) {
 			// Only test directories
 			continue
 		}
-		f := f
 		t.Run(f.Name(), func(t *testing.T) {
 			t.Parallel()
 			dir := filepath.Join(".", "testdata", f.Name())
diff --git a/scripts/release/main_internal_test.go b/scripts/release/main_internal_test.go
index ce83e7169a35b..587d327272af5 100644
--- a/scripts/release/main_internal_test.go
+++ b/scripts/release/main_internal_test.go
@@ -115,7 +115,6 @@ Enjoy.
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 			if diff := cmp.Diff(removeMainlineBlurb(tt.body), tt.want); diff != "" {
@@ -167,7 +166,6 @@ func Test_release_autoversion(t *testing.T) {
 	require.NoError(t, err)
 
 	for _, file := range files {
-		file := file
 		t.Run(file, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/scripts/releasemigrations/main.go b/scripts/releasemigrations/main.go
index a06be904b004d..249d1891f9c29 100644
--- a/scripts/releasemigrations/main.go
+++ b/scripts/releasemigrations/main.go
@@ -230,7 +230,6 @@ func hasMigrationDiff(dir string, a, b string) ([]string, error) {
 	migrations := strings.Split(strings.TrimSpace(string(output)), "\n")
 	filtered := make([]string, 0, len(migrations))
 	for _, migration := range migrations {
-		migration := migration
 		if strings.Contains(migration, "fixtures") {
 			continue
 		}
diff --git a/scripts/typegen/main.go b/scripts/typegen/main.go
index 0e7457406102e..acbaa9c2c35fe 100644
--- a/scripts/typegen/main.go
+++ b/scripts/typegen/main.go
@@ -243,7 +243,6 @@ func generateRbacObjects(templateSource string) ([]byte, error) {
 	var out bytes.Buffer
 	list := make([]Definition, 0)
 	for t, v := range policy.RBACPermissions {
-		v := v
 		list = append(list, Definition{
 			PermissionDefinition: v,
 			Type:                 t,
diff --git a/site/site_test.go b/site/site_test.go
index d257bd9519b3d..f7301debba2be 100644
--- a/site/site_test.go
+++ b/site/site_test.go
@@ -498,7 +498,6 @@ func TestServingBin(t *testing.T) {
 	}
 	//nolint // Parallel test detection issue.
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/tailnet/configmaps_internal_test.go b/tailnet/configmaps_internal_test.go
index fa027ffc7fdd4..169dd05d8cccc 100644
--- a/tailnet/configmaps_internal_test.go
+++ b/tailnet/configmaps_internal_test.go
@@ -1116,7 +1116,6 @@ func TestConfigMaps_updatePeers_nonexist(t *testing.T) {
 		proto.CoordinateResponse_PeerUpdate_DISCONNECTED,
 		proto.CoordinateResponse_PeerUpdate_LOST,
 	} {
-		k := k
 		t.Run(k.String(), func(t *testing.T) {
 			t.Parallel()
 			ctx := testutil.Context(t, testutil.WaitShort)
diff --git a/tailnet/convert_test.go b/tailnet/convert_test.go
index 31b5794414ff3..72290cfba472e 100644
--- a/tailnet/convert_test.go
+++ b/tailnet/convert_test.go
@@ -64,7 +64,6 @@ func TestNode(t *testing.T) {
 	}
 
 	for _, tc := range testCases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			p, err := tailnet.NodeToProto(&tc.node)
diff --git a/tailnet/telemetry_internal_test.go b/tailnet/telemetry_internal_test.go
index c738ddb3314a8..30c2a5b77d5f8 100644
--- a/tailnet/telemetry_internal_test.go
+++ b/tailnet/telemetry_internal_test.go
@@ -121,7 +121,6 @@ func TestTelemetryStore(t *testing.T) {
 		}
 
 		for _, c := range cases {
-			c := c
 			t.Run(c.name, func(t *testing.T) {
 				t.Parallel()
 				telemetry, err := newTelemetryStore()
diff --git a/vpn/tunnel_internal_test.go b/vpn/tunnel_internal_test.go
index 5c4e6ec03d47f..c21fd20251282 100644
--- a/vpn/tunnel_internal_test.go
+++ b/vpn/tunnel_internal_test.go
@@ -1153,7 +1153,6 @@ func TestProcessFreshState(t *testing.T) {
 	}
 
 	for _, tt := range tests {
-		tt := tt
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
diff --git a/vpn/version_test.go b/vpn/version_test.go
index cff333f10b507..442aa66c85279 100644
--- a/vpn/version_test.go
+++ b/vpn/version_test.go
@@ -175,7 +175,6 @@ func TestRPCVersionListParseString(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			got, err := vpn.ParseRPCVersionList(tc.input)
@@ -248,7 +247,6 @@ func TestRPCVersionListValidate(t *testing.T) {
 	}
 
 	for _, tc := range cases {
-		tc := tc
 		t.Run(tc.name, func(t *testing.T) {
 			t.Parallel()
 			err := tc.list.Validate()