Attestations for
  ghcr.io/kapsl-sh/bsdmainutils@sha256:210390840f355e18cd72e0c3913e678ab5481e7ad9bed1de817408eacc8d6ed7

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/bsdmainutils@sha256:210390840f355e18cd72e0c3913e678ab5481e7ad9bed1de817408eacc8d6ed7

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:7ca1eedbce8e2654edf935d5b2036d7f057be3dfdcb14a4aa75a1bcfc2f006c1  (2120 bytes)
  signature  sha256:d721f28f0ee8417bf9d11ff57fc773f684b47c48c260f5feb9457d4f90d56890  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:ed48dcc6b5fb1eed8d26b9474aa23ece3c6cf88fadae26b974e12d26deb4b8b4  (3949 bytes)
  signature  sha256:a198d9e66a0cfb56d016851528f8ab4efcceda75d9ba5418c888c6e1fbbff9ae  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:88a93e12deebd1f708022f96d4048be5d20307e7e1e4a02711e9e7e3ac93799f  (235 bytes)
  signature  sha256:4f08fe88df480e63189a592d0b0639934dea06f229aeb4a728e570c7eed4877e  (vex.json.sigstore)