diff --git a/pkg/cmd/attestation/api/mock_httpClient_test.go b/pkg/cmd/attestation/api/mock_httpClient_test.go
index b89c101fe..2914d7887 100644
--- a/pkg/cmd/attestation/api/mock_httpClient_test.go
+++ b/pkg/cmd/attestation/api/mock_httpClient_test.go
@@ -5,18 +5,22 @@ import (
 	"fmt"
 	"io"
 	"net/http"
+	"sync"
 
 	"github.com/cli/cli/v2/pkg/cmd/attestation/test/data"
 	"github.com/golang/snappy"
 )
 
 type mockHttpClient struct {
+	mutex  sync.RWMutex
 	called bool
 	OnGet  func(url string) (*http.Response, error)
 }
 
 func (m *mockHttpClient) Get(url string) (*http.Response, error) {
+	m.mutex.Lock()
 	m.called = true
+	m.mutex.Unlock()
 	return m.OnGet(url)
 }