Error Codes

CLI Message: digest mismatch for <path>

Cause: The file's content doesn't match the digest recorded in the manifest.

Resolution: Either rebuild the pack with the current files, or restore the original file content.

CLI Message: invalid manifest: <details>

Cause: The manifest.json is malformed or doesn't conform to the schema.

Resolution: Check the manifest JSON syntax. Rebuild the pack if corrupted.

CLI Message: artifact not found: <path>

Cause: The manifest references a file that doesn't exist in the pack.

Resolution: The pack may be corrupted. Obtain a fresh copy.

CLI Message: pack is corrupt or not a valid ZIP

Cause: The .epack file is not a valid ZIP archive.

Resolution: The file was corrupted during transfer. Re-download or rebuild.

CLI Message: signature verification failed

Cause: The cryptographic signature doesn't validate against the manifest.

Resolution: The pack may have been modified after signing. Obtain a fresh signed copy.

CLI Message: identity mismatch: expected <subject>, got <actual>

Cause: The signer identity doesn't match your --subject or --issuer constraint.

Resolution: Check who signed the pack with epack inspect. Update your constraints or have the correct identity re-sign.

CLI Message: pack has no attestations

Cause: --require-attestation was specified but the pack is unsigned.

Resolution: Sign the pack with epack sign, or remove the --require-attestation flag.

CLI Message: attestation certificate has expired

Cause: The Sigstore certificate used to sign the pack has expired and the timestamp is outside the validity window.

Resolution: Re-sign the pack with a fresh certificate.

CLI Message: no artifacts to package

Cause: The glob pattern didn't match any files.

Resolution: Check your file paths and glob patterns. Use quotes to prevent shell expansion.

CLI Message: file exceeds maximum size: <path>

Cause: Individual files are limited to 100MB by default.

Resolution: Compress large files, split them, or use --max-file-size to increase the limit.

CLI Message: invalid stream identifier: <stream>

Cause: The stream name doesn't match the required format.

Resolution: Use format org/name or org/name/env. Alphanumeric, hyphens, and slashes only.

CLI Message: collector '<name>' timed out after <duration>

Cause: The collector didn't complete within the timeout period.

Resolution: Increase timeout with --timeout, check network connectivity, verify API credentials.

CLI Message: required secret '<name>' not found in environment

Cause: A required environment variable is not set.

Resolution: Set the environment variable before running epack (for example: source .env && epack collect).

CLI Message: lockfile mismatch: run 'epack lock' to update

Cause: --frozen was specified but the lockfile doesn't match dependencies.

Resolution: Run epack lock locally and commit the updated lockfile.