Attestations for
  ghcr.io/kapsl-sh/cabal@sha256:1ad3840ed91ae0f517b1d81dc005a2ae26493ca64f4cea14e57a6e65a1aef4ad

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/cabal@sha256:1ad3840ed91ae0f517b1d81dc005a2ae26493ca64f4cea14e57a6e65a1aef4ad

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:531cf72413fd21ced37618b2a1012a1e646b19da7aa3c98f67cd4f485a9f4816  (2493 bytes)
  signature  sha256:474177066a7a3c5e765719bf2498a18a219d4960916aeb041ff66556ece74186  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:50e6a772c767e99e32072d7aca5e80c0c37d69ff1c0a211eb0aa302dade2961c  (3254 bytes)
  signature  sha256:59ceca9cf50af8105ae52d0ce4c0f59912185fac65c03f14a78ea918e77d8e46  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:846eee9b12e4c9c12f3221bc194dc00faec3b7fac89c220f576a07e0979d562f  (228 bytes)
  signature  sha256:96346f923819e74f37ea5f887f99806428e30b000e7ffc9d6ddef28ab9434da5  (vex.json.sigstore)