Merge pull request #23 from co-browser/maceip-patch-6

fix: cosign non-interactive mode

Author: michiosw

.github/workflows/release.yaml

@@ -10,6 +10,9 @@
     contents: write
     issues: write
     pull-requests: write
+    id-token: write # needed for keyless signing
+    packages: write # needed for ghcr access
+    attestations: write # needed for provenance
 
   jobs:
     release:

.goreleaser.yml

@@ -149,6 +149,7 @@ signs:
       - "--output-certificate=${certificate}"
       - "--output-signature=${signature}"
       - "${artifact}"
+      - "--yes"
     artifacts: checksum
     output: true