diff --git a/workspace-server/internal/provisioner/cp_provisioner.go b/workspace-server/internal/provisioner/cp_provisioner.go
index ceee59ca..8f7c3d9c 100644
--- a/workspace-server/internal/provisioner/cp_provisioner.go
+++ b/workspace-server/internal/provisioner/cp_provisioner.go
@@ -270,10 +270,10 @@ func collectCPConfigFiles(cfg WorkspaceConfig) (map[string]string, error) {
 		// would bypass the subsequent path-relativization checks below.
 		rootInfo, err := os.Lstat(cfg.TemplatePath)
 		if err != nil {
-			return fmt.Errorf("collectCPConfigFiles: lstat template path: %w", err)
+			return nil, fmt.Errorf("collectCPConfigFiles: lstat template path: %w", err)
 		}
 		if rootInfo.Mode()&os.ModeSymlink != 0 {
-			return fmt.Errorf("collectCPConfigFiles: template path must not be a symlink")
+			return nil, fmt.Errorf("collectCPConfigFiles: template path must not be a symlink")
 		}
 		err = filepath.WalkDir(cfg.TemplatePath, func(path string, d os.DirEntry, walkErr error) error {
 			if walkErr != nil {