From 41c7c56b31c4823fc2503153ede176f99c702631 Mon Sep 17 00:00:00 2001
From: Dimitris Karakasilis <dimitris@karakasilis.me>
Date: Mon, 6 Nov 2023 15:21:07 +0200
Subject: [PATCH] Add `-y` to cosign attest command too

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
---
 .github/workflows/reusable-docker-arm-build.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/reusable-docker-arm-build.yaml b/.github/workflows/reusable-docker-arm-build.yaml
index 2c3d5a185..ef35224f7 100644
--- a/.github/workflows/reusable-docker-arm-build.yaml
+++ b/.github/workflows/reusable-docker-arm-build.yaml
@@ -144,7 +144,7 @@ jobs:
           cosign attach sbom --sbom $spdx $image_ref
           cosign sign -y $image_ref --attachment sbom
           # in-toto attestation
-          cosign attest --type spdx --predicate $spdx $image_ref
+          cosign attest -y --type spdx --predicate $spdx $image_ref
       - name: Upload results
         if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/master' && inputs.flavor != 'ubuntu-20-lts-arm-nvidia-jetson-agx-orin' }}
         uses: actions/upload-artifact@v3