I don't find either one objectionable. If the speaker is thinking of five confirmations as a single group that represents "all we need", then "is" is all right. After all, the corresponding assertion has "is": All we need is five confirmations.
New words, one handy idiom, and a 2-minute quiz — delivered to your inbox to keep your streak alive.