Attestations for ghcr.io/kapsl-sh/ed@sha256:ebef2ccf805cdbc7869d16266b15f7d49465235d76e324705756789894fb14ab Signed at seal time, amd64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/ed@sha256:ebef2ccf805cdbc7869d16266b15f7d49465235d76e324705756789894fb14ab === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:ee715ea0b099fc1847ea1321487b9cae8659021939271263335cfe842268378d (2053 bytes) signature sha256:669b6ff42aa32f9b2dc565657b259489916197247f4fdf9f1983b9057ec8417d (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:eb8ee76226fbe0ce694b9f4a908b981548d452598a1f5f2ea1928cfcb4dde901 (2866 bytes) signature sha256:18bb77cbd4f92dc37f67aace9f1e8e462a0799caa139ba86c965cea026c63d18 (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:1589ff61e2ef5ae130f3b408d129e6c4d65af6d36d3230048b06da5aeba87ec6 (225 bytes) signature sha256:bf5b9810d4d4a495cb1176ac2e4950d6cfee16eddbc64e41342c6fe6bde52bd4 (vex.json.sigstore)