fix(cosign): add yes consent

nais · Apr 27, 2023 · d64ae26 · d64ae26
1 parent f48066a
commit d64ae26
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -149,8 +149,8 @@ jobs:
       - name: Sign Docker image
         run: |
           echo '${{ secrets.COSIGN_PRIVATE_KEY }}' > cosign.key
-          cosign sign --key cosign.key ${{ env.CLI_IMAGE_TAG }}
-          cosign sign --key cosign.key ${{ env.ACTION_IMAGE_TAG }}
+          cosign sign --yes --key cosign.key ${{ env.CLI_IMAGE_TAG }}
+          cosign sign --yes --key cosign.key ${{ env.ACTION_IMAGE_TAG }}
         env:
           COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
       - name: Verify and attach attestation

diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -39,13 +39,13 @@ signs:
   - id: sign archives
     cmd: cosign
     stdin: '{{ .Env.COSIGN_PASSWORD }}'
-    args: ["sign-blob", "--key=cosign.key", "--output=${signature}", "${artifact}"]
+    args: ["sign-blob", "--key=cosign.key", "--output=${signature}", "--yes", "${artifact}"]
     signature: "${artifact}.sig"
     artifacts: archive
   - id: sign checksum.txt
     cmd: cosign
     stdin: '{{ .Env.COSIGN_PASSWORD }}'
-    args: ["sign-blob", "--key=cosign.key", "--output=${signature}", "${artifact}"]
+    args: ["sign-blob", "--key=cosign.key", "--output=${signature}", "--yes", "${artifact}"]
     signature: "${artifact}.sig"
     artifacts: checksum
 changelog: