🐛 Skip cosign confirmation prompt. (#1143)

Signed-off-by: Spencer Schrock <[email protected]>
ossf · May 11, 2023 · 914ca3e · 914ca3e
1 parent 3eabc86
commit 914ca3e
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/signing/signing.go b/signing/signing.go
@@ -72,10 +72,11 @@ func (s *Signing) SignScorecardResult(scorecardResultsFile string) error {
 	// Prepare settings for SignBlobCmd.
 	rootOpts := &sigOpts.RootOptions{Timeout: sigOpts.DefaultTimeout} // Just the timeout.
 	keyOpts := sigOpts.KeyOpts{
-		FulcioURL:    sigOpts.DefaultFulcioURL,     // Signing certificate provider.
-		RekorURL:     sigOpts.DefaultRekorURL,      // Transparency log.
-		OIDCIssuer:   sigOpts.DefaultOIDCIssuerURL, // OIDC provider to get ID token to auth for Fulcio.
-		OIDCClientID: "sigstore",
+		FulcioURL:        sigOpts.DefaultFulcioURL,     // Signing certificate provider.
+		RekorURL:         sigOpts.DefaultRekorURL,      // Transparency log.
+		OIDCIssuer:       sigOpts.DefaultOIDCIssuerURL, // OIDC provider to get ID token to auth for Fulcio.
+		OIDCClientID:     "sigstore",
+		SkipConfirmation: true, // skip cosign's privacy confirmation prompt as we run non-interactively
 	}
 
 	// This command will use the provided OIDCIssuer to authenticate into Fulcio, which will generate the