diff --git a/zuul.d/playbooks/build-images/run.yml b/zuul.d/playbooks/build-images/run.yml
index 68ad3a7..851154b 100644
--- a/zuul.d/playbooks/build-images/run.yml
+++ b/zuul.d/playbooks/build-images/run.yml
@@ -47,6 +47,7 @@
       when: zuul.pipeline == 'post'
       block:
         - name: Download cosign binary
+          become: true
           ansible.builtin.get_url:
             url: https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64
             dest: /usr/local/bin/cosign