Attestations for
  ghcr.io/kapsl-sh/claude-code@sha256:ee67519d258a4717aecfc8d3975f6ca52c428c66865028763a879a945a959b5e

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/claude-code@sha256:ee67519d258a4717aecfc8d3975f6ca52c428c66865028763a879a945a959b5e

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:2b451a6279672ce58546ab15cb9991888b371af125b819154a6c4640f72ae1ca  (3632 bytes)
  signature  sha256:527292e2890431593ae177794e79b2f61711fccda32ec31720adc1e2dc3951aa  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:ae303455625606470e8a07e9c6d42f467627bdd4525c14e7fe94ac3d39d5b627  (2509 bytes)
  signature  sha256:ca121b506fede30fbf7479741ee4a5c4fccdce5195b2b1acbbc9a14b786ce672  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:7ea7273ce98897a1621cf7c11d9329e3bc5783fbe7d7fe94a8acc0890b57d6d6  (234 bytes)
  signature  sha256:a949700ceb62654164fae356d251096a2dc6efb9e6a0f4236a96d6f2c6009eb3  (vex.json.sigstore)