Attestations for
  ghcr.io/kapsl-sh/codex@sha256:fad8bcdfb1031f7be52a1969c00810a09723d37014a3e566f9311c776c44356c

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/codex@sha256:fad8bcdfb1031f7be52a1969c00810a09723d37014a3e566f9311c776c44356c

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:1672b1ca34405894d7a72d99e82b056b0b1ea53d1701b0a08bb33b4da6913d9a  (3216 bytes)
  signature  sha256:25fd2d51564a5fb128a8f899dff1593fcd922e977c57bdb738e11f058fc7593d  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:4c977a123cc808cade7d434e456f7cdb496da183736720cf0214a0970e1d7147  (192669 bytes)
  signature  sha256:a44f115b33f906acf776ef7294b816ada09f42b583d53d3aa6226e0ef1b64233  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:9bdc25b279d33dc693f5d6e4b54aa81d49067a87fc923a11f8ac121b42f20c61  (228 bytes)
  signature  sha256:04dcfc681e58980541b708065d22a7bd9fbd3b0fb756ed6b3bd065c0156da9eb  (vex.json.sigstore)