Attestations for
  ghcr.io/kapsl-sh/cpanm@sha256:2225026ba792238ebbfbae125d26b781ddb628f43e5269fd1f86aadaa3008f92

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/cpanm@sha256:2225026ba792238ebbfbae125d26b781ddb628f43e5269fd1f86aadaa3008f92

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:5940328462e8da254122c44368536a48bcdeeefb3f5e035ea3dfae5bcc7614a8  (3204 bytes)
  signature  sha256:1ad6074174ba246db463593f06ddaeccad556739e29aa4af551d14d060b2af0e  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:dffd04bd7818ec63a2fe34050550021405bcebed844699f15781b1d372d22f75  (2383 bytes)
  signature  sha256:7903823b79a89a1e71c0599a7fd813ca3f8a5df33a1f01ea70f809c614997d66  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:faee1ab9cd1c23a90194b9301e432d68a8a336eb2df84de7922f15b03375c0ff  (228 bytes)
  signature  sha256:228754789369800851e8c745db6feaee201d3b96f67df0909f947ec08ad5adfe  (vex.json.sigstore)