diff --git a/third_party/go/patches/gvisor-fix-debug-builds.patch b/third_party/go/patches/gvisor-fix-debug-builds.patch
index ea5b04d..ceafb5c 100644
--- a/third_party/go/patches/gvisor-fix-debug-builds.patch
+++ b/third_party/go/patches/gvisor-fix-debug-builds.patch
@@ -407,7 +407,7 @@
 +			// interrupted KVM. Since we're in a signal handler
 +			// currently, all signals are masked and the signal
 +			// must have been delivered directly to this thread.
-+			timeout := unix.Timespec{}
++			var timeout unix.Timespec
 +			sig, _, errno := unix.RawSyscall6( // escapes: no.
 +				unix.SYS_RT_SIGTIMEDWAIT,
 +				uintptr(unsafe.Pointer(&bounceSignalMask)),
diff --git a/third_party/sandboxroot/mirror/main.go b/third_party/sandboxroot/mirror/main.go
index 06479d3..a3256ee 100644
--- a/third_party/sandboxroot/mirror/main.go
+++ b/third_party/sandboxroot/mirror/main.go
@@ -28,7 +28,7 @@
 // ourMirrorURL returns a fully formed URL-string to our mirror (as defined by
 // flags), optionally appending the given parts as file path parts.
 func ourMirrorURL(parts ...string) string {
-	u := url.URL{}
+	var u url.URL
 	u.Scheme = "https"
 	u.Host = "storage.googleapis.com"