diff --git a/internal/command/command.go b/internal/command/command.go
index 232766fc7..ff1a4337c 100644
--- a/internal/command/command.go
+++ b/internal/command/command.go
@@ -375,7 +375,7 @@ func UsageMetrics(command *cobra.Command, wg *sync.WaitGroup) {
 
 	// calculates a user ID that doesn't leak any personal information
 	usr, _ := user.Current() // ignore err, just use empty string
-	hash := sha256.Sum256([]byte(fmt.Sprintf("%s%s", usr.Username, usr.Uid)))
+	hash := sha256.Sum256(fmt.Appendf(nil, "%s%s", usr.Username, usr.Uid))
 	userID := base64.StdEncoding.EncodeToString(hash[:])
 
 	_ = client.Track(userID, "cli-command", &mixpanel.Event{
diff --git a/internal/emulator/start.go b/internal/emulator/start.go
index c7fe7b621..bc19b1351 100644
--- a/internal/emulator/start.go
+++ b/internal/emulator/start.go
@@ -112,7 +112,7 @@ func trackRequestMiddleware(next http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		// Generate a unique user ID
 		usr, _ := user.Current() // ignore err, just use empty string
-		hash := sha256.Sum256([]byte(fmt.Sprintf("%s%s", usr.Username, usr.Uid)))
+		hash := sha256.Sum256(fmt.Appendf(nil, "%s%s", usr.Username, usr.Uid))
 		userID := base64.StdEncoding.EncodeToString(hash[:])
 
 		// Track the request in Mixpanel
diff --git a/internal/util/util.go b/internal/util/util.go
index 111ed896c..e701d1582 100644
--- a/internal/util/util.go
+++ b/internal/util/util.go
@@ -65,7 +65,7 @@ func AddToGitIgnore(filename string, loader flowkit.ReaderWriter) error {
 	}
 	return loader.WriteFile(
 		gitIgnorePath,
-		[]byte(fmt.Sprintf("%s\n%s", gitIgnoreFiles, filename)),
+		fmt.Appendf(nil, "%s\n%s", gitIgnoreFiles, filename),
 		filePermissions,
 	)
 }