Attestations for
  ghcr.io/kapsl-sh/claude-code@sha256:e105ea726f43b6aa732d35d75f0579fca31b3a3f1242f0b3bb8e622a4da898a3

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/claude-code@sha256:e105ea726f43b6aa732d35d75f0579fca31b3a3f1242f0b3bb8e622a4da898a3

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:070fb099b8ffb6a46d4c56051907ea056123bfc56df1a9f191dd66f9a79917ab  (3633 bytes)
  signature  sha256:bf3eded947a88fc1d4673443ceb7c9cf1fac845410cdc7a577f1791e8c5c4154  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:799f2501039da543191380848546ddb41e1c705547859e38562c9c6099241a3e  (2509 bytes)
  signature  sha256:57c0fe7e3d0d0f518c454dcc14a6877dd098ce076318601576dcecfe62f85cb2  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:710652e3d1521e863c3cc7bfc0ebf7169d4088cad52e1e59f80c4bdbf32717f4  (234 bytes)
  signature  sha256:ceefd40fec8194f4db93b65602a129f0e0bb27c82a5ddbc6945c742e5bbd82b6  (vex.json.sigstore)