Attestations for
  ghcr.io/kapsl-sh/bsdextrautils@sha256:51773bd8823cd2b0010288e926f5c1d59014f836e07dbfb830e99d3d1f6ab750

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/bsdextrautils@sha256:51773bd8823cd2b0010288e926f5c1d59014f836e07dbfb830e99d3d1f6ab750

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:c663481bf5aafbf46aaf544e58d350f1e666bba7bc06c16d6e538f235c8c969b  (2117 bytes)
  signature  sha256:50d7578eb27426a329a838cc37a7c443bbf33d16ed62562330eb2471ea409d1b  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:e75f8911a86b7badbd843ee931d8ec9890aae06341fc27cb69e796b2692356f7  (7409 bytes)
  signature  sha256:eecd49351d8f27cc87f374062babaf96584f0198ac2ceca9bc8d2c7c78f455c7  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:8a61719eb4ff364a28448e0f2dc2176418042af8dd4c71ede80701be7e266bd4  (236 bytes)
  signature  sha256:f69fb8f015614addb9b53678419d807dfdd70aabf9477c21639b31b9f88fc264  (vex.json.sigstore)