E_COSIGN_SIG_MISSING - Akua | Docs

A cosign public key is configured but the registry has no .sig sidecar for the artifact, or it is malformed: the publisher has not signed this version. Offline, it also means akua.lock does not record the configured key for a cached dependency; run akua pkg lock online to verify and record it.

Shape

{
  "level": "error",
  "code": "E_COSIGN_SIG_MISSING",
  "message": "...",
  "docs": "https://cli.akua.dev/errors/E_COSIGN_SIG_MISSING"
}

Error codes

What each structured error means and how to resolve it.

akua pkg commands

Every command, the universal flags and the exit codes.

⌘I