Add -y to cosign attest command too

Signed-off-by: Dimitris Karakasilis <[email protected]>
kairos-io · Nov 6, 2023 · 41c7c56 · 41c7c56
1 parent 29746a1
commit 41c7c56
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/reusable-docker-arm-build.yaml b/.github/workflows/reusable-docker-arm-build.yaml
@@ -144,7 +144,7 @@ jobs:
           cosign attach sbom --sbom $spdx $image_ref
           cosign sign -y $image_ref --attachment sbom
           # in-toto attestation
-          cosign attest --type spdx --predicate $spdx $image_ref
+          cosign attest -y --type spdx --predicate $spdx $image_ref
       - name: Upload results
         if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/master' && inputs.flavor != 'ubuntu-20-lts-arm-nvidia-jetson-agx-orin' }}
         uses: actions/upload-artifact@v3