Attestations for ghcr.io/kapsl-sh/bind9@sha256:06ecf5486e4d786d213baed755684baca81c43441a97c3248d37cc18b40c55da Signed at seal time, amd64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/bind9@sha256:06ecf5486e4d786d213baed755684baca81c43441a97c3248d37cc18b40c55da === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:b9e5dc3d5ba2bca3e7b506fc6be292e65ef888e4ee8f95f1f6ac5d08232bbdab (1791 bytes) signature sha256:f2f5225e2f9acdca64aba7472e85341c5a02aadd220421b996a394463a3dd6dd (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:b5b203f96e5da4ecaa074e431fce8f1c440dfc5f68ee3efaaf05155fa3e58143 (24368 bytes) signature sha256:afb8e5011997bfe2d7f0a4405f3fd57b0bf26753fcace3d6d62efea800c6c660 (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:bd15354cb3fbffc6bae93bf8c6b4cd35d272d9e4348886569e50073c064922a0 (2014 bytes) signature sha256:8ffaa13aaea901ff4334b8ba9882e51c8f4cd16e3f1ba2dd9bea6ded98298d68 (vex.json.sigstore)