Attestations for
  ghcr.io/kapsl-sh/age@sha256:a061610f33d47c74eeadc257c785d406a71a6471f91702699dcaa8005e2f0606

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/age@sha256:a061610f33d47c74eeadc257c785d406a71a6471f91702699dcaa8005e2f0606

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/age
  digest    sha256:a061610f33d47c74eeadc257c785d406a71a6471f91702699dcaa8005e2f0606
  states    8 component(s) are inside this image
      filippo.io/age         v1.3.1+dirty             pkg:golang/filippo.io/age@v1.3.1%2Bdirty
      filippo.io/edwards25519 v1.1.0                   pkg:golang/filippo.io/edwards25519@v1.1.0
      filippo.io/hpke        v0.4.0                   pkg:golang/filippo.io/hpke@v0.4.0
      filippo.io/nistec      v0.0.4                   pkg:golang/filippo.io/nistec@v0.0.4
      golang.org/x/crypto    v0.55.0                  pkg:golang/golang.org/x/crypto@v0.55.0
      golang.org/x/sys       v0.47.0                  pkg:golang/golang.org/x/sys@v0.47.0
      golang.org/x/term      v0.45.0                  pkg:golang/golang.org/x/term@v0.45.0
      stdlib                 go1.27.0                 pkg:golang/stdlib@1.27.0

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/age
  digest    sha256:a061610f33d47c74eeadc257c785d406a71a6471f91702699dcaa8005e2f0606
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      2 resolved input(s)
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      composed-image     compose:go
  sbom      sbom.json sha256:8949680dca068007c489bcffd57f1059...