Attestations for
  ghcr.io/kapsl-sh/bsdextrautils@sha256:ddce3c2d5d9b72b4383504f6f0b2a7ac3fbc609b04a8e8670adbc1b2efa1b0b9

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/bsdextrautils@sha256:ddce3c2d5d9b72b4383504f6f0b2a7ac3fbc609b04a8e8670adbc1b2efa1b0b9

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:77ba3418e573bc8bd0a242623ee902751a533f0856fe15b1250138f90e897b73  (2116 bytes)
  signature  sha256:ed603fea9b52495e9820712bb2a82ccfbafafebc56daaf8635d58baa72461f31  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:e1e4fbd486142b414a374096bdac0427fe1d419cfa52b3861768b96dd24faf4d  (7409 bytes)
  signature  sha256:d3f282237aced9f2b49b28a2c08b628db1771f646365e74955339011bd475dce  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:56579c304d57e14ec4384c7fcf08f1e3a65befda5073bedf27662c23f81e293a  (236 bytes)
  signature  sha256:1183d3dc4bcffb78ac317b0a2faa1cfcd5a8bc71036d7fbf56f28c6e836afc8f  (vex.json.sigstore)