diff --git a/go.mod b/go.mod
index 46ab193ec..b5849a76a 100644
--- a/go.mod
+++ b/go.mod
@@ -16,7 +16,7 @@ require (
 	github.com/creack/pty v1.1.21
 	github.com/gabriel-vasile/mimetype v1.4.3
 	github.com/gdamore/tcell/v2 v2.5.4
-	github.com/github/gh-attestation v0.3.0
+	github.com/github/gh-attestation v0.3.1-0.20240213221736-bd06290fa8ee
 	github.com/google/go-cmp v0.6.0
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
 	github.com/gorilla/websocket v1.5.0
diff --git a/go.sum b/go.sum
index b4b32862a..7628cb9ac 100644
--- a/go.sum
+++ b/go.sum
@@ -148,8 +148,8 @@ github.com/gdamore/encoding v1.0.0 h1:+7OoQ1Bc6eTm5niUzBa0Ctsh6JbMW6Ra+YNuAtDBdk
 github.com/gdamore/encoding v1.0.0/go.mod h1:alR0ol34c49FCSBLjhosxzcPHQbf2trDkoo5dl+VrEg=
 github.com/gdamore/tcell/v2 v2.5.4 h1:TGU4tSjD3sCL788vFNeJnTdzpNKIw1H5dgLnJRQVv/k=
 github.com/gdamore/tcell/v2 v2.5.4/go.mod h1:dZgRy5v4iMobMEcWNYBtREnDZAT9DYmfqIkrgEMxLyw=
-github.com/github/gh-attestation v0.3.0 h1:g6rCfmh3361+HwS0XGkYExVyUnxi5qz6PoBD4+7i/MY=
-github.com/github/gh-attestation v0.3.0/go.mod h1:mEvQIAwWSDZ91gGGV+A6IX3UO10SPUEdjmGLYnlcThY=
+github.com/github/gh-attestation v0.3.1-0.20240213221736-bd06290fa8ee h1:YXfnpepX2RkuDYsbKITBNJW6Di+h6E7cKImXa2vQ8wk=
+github.com/github/gh-attestation v0.3.1-0.20240213221736-bd06290fa8ee/go.mod h1:mEvQIAwWSDZ91gGGV+A6IX3UO10SPUEdjmGLYnlcThY=
 github.com/go-chi/chi v4.1.2+incompatible h1:fGFk2Gmi/YKXk0OmGfBh0WgmN3XB8lVnEyNz34tQRec=
 github.com/go-chi/chi v4.1.2+incompatible/go.mod h1:eB3wogJHnLi3x/kFX2A+IbTBlXxmMeXJVKy9tTv1XzQ=
 github.com/go-jose/go-jose/v3 v3.0.1 h1:pWmKFVtt+Jl0vBZTIpz/eAKwsm6LkIxDVVbFHKkchhA=
diff --git a/pkg/cmd/attestation/attestation.go b/pkg/cmd/attestation/attestation.go
index 0ba61cd56..978a5327b 100644
--- a/pkg/cmd/attestation/attestation.go
+++ b/pkg/cmd/attestation/attestation.go
@@ -13,9 +13,9 @@ func NewCmdAttestation(io *iostreams.IOStreams, version, buildDate string) *cobr
 		Short:   "attestations",
 	}
 
-	root.AddCommand(app.NewDownloadCmd(version, buildDate))
-	root.AddCommand(app.NewVerifyCmd(version, buildDate))
-	root.AddCommand(app.NewTUFRootVerifyCmd())
+	root.AddCommand(app.NewDownloadCmd(io, version, buildDate))
+	root.AddCommand(app.NewVerifyCmd(io, version, buildDate))
+	root.AddCommand(app.NewTUFRootVerifyCmd(io))
 
 	return root
 }