Update prompt to only prompt for non-destructive actions

Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>

cmd/cosign/cli/clean.go

@@ -51,7 +51,7 @@ func Clean() *cobra.Command {
 
 func CleanCmd(ctx context.Context, regOpts options.RegistryOptions, cleanType, imageRef string, force bool) error {
 	if !force {
-		ok, err := cosign.ConfirmPrompt(prompt(cleanType))
+		ok, err := cosign.ConfirmPrompt(prompt(cleanType), true /*destructive*/)
 		if err != nil {
 			return err
 		}

cmd/cosign/cli/fulcio/fulcio.go

@@ -155,7 +155,7 @@ func NewSigner(ctx context.Context, ko options.KeyOpts) (*Signer, error) {
 		fmt.Fprintln(os.Stderr, "Non-interactive mode detected, using device flow.")
 		flow = FlowDevice
 	default:
-		ok, err := cosign.ConfirmPrompt(PrivacyStatementConfirmation)
+		ok, err := cosign.ConfirmPrompt(PrivacyStatementConfirmation, false /*destructive*/)
 		if err != nil {
 			return nil, err
 		}

cmd/cosign/cli/options/root.go

@@ -46,5 +46,5 @@ func (o *RootOptions) AddFlags(cmd *cobra.Command) {
 		"timeout for commands")
 
 	cmd.PersistentFlags().BoolVarP(&o.SkipConfirmation, "yes", "y", false,
-		"skip confirmation prompts")
+		"skip confirmation prompts for non-destructive operations")
 }

pkg/cosign/common.go

@@ -43,8 +43,11 @@ func FileExists(filename string) bool {
 	return !info.IsDir()
 }
 
-func ConfirmPrompt(msg string) (bool, error) {
-	if skipConfirmation {
+// ConfirmPrompt prompts the user for confirmation for an action. Supports skipping
+// the confirmation prompt when the global skipConfirmation is set, and when the
+// action is non-destructive.
+func ConfirmPrompt(msg string, destructive bool) (bool, error) {
+	if skipConfirmation && !destructive {
 		return skipConfirmation, nil
 	}