The issue was caused by the presence of the 0.0.2 tag and the fact that the tests we have for query packs do a version check against the “sdk version”, which is the osquery version as retrieved by CMake via git. Since the 0.0.2 tag was like 2 commits earlier than the HEAD, that’s what it was taking.