Attestations for ghcr.io/kapsl-sh/ed@sha256:68ff8ed51a27b410aa2befedf687b9d0450a8cd3ef4dcea33234f65fb173bfe6 Signed at seal time, arm64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/ed@sha256:68ff8ed51a27b410aa2befedf687b9d0450a8cd3ef4dcea33234f65fb173bfe6 === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:20d0317cfe59638f63c001b3d52738d4d41f17703d5f8d612520d15623df81d0 (2054 bytes) signature sha256:0a40bed8c5e7fa34c9759054d4f450997ab3d260ed0ee0490959fd3725993319 (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:6fb367763d9c3eadf52f24b1aad8374bbe635b183a9c028dd5f0083dd8287035 (2866 bytes) signature sha256:4e9f961e2b6fda9b68a4e50c94da4417dcd47085b41b289979c9da2bde167321 (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:a354476f48f05a76d9075a2e6f9d2f626f6fb98ab48defd29aaccbc63bae1301 (225 bytes) signature sha256:1149eb5b0ee8ac7a5b0b7d886889912725b439ff5430d0fbb919db4848c6aa7f (vex.json.sigstore)