Attestations for
  ghcr.io/kapsl-sh/elixir@sha256:671957fdeeee2ed6c35167f4b52573e89c109a8d89aee683947843c297d4075c

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/elixir@sha256:671957fdeeee2ed6c35167f4b52573e89c109a8d89aee683947843c297d4075c

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:0fce753972247f200f957c5c539145effa6ad6d4c9cda7256f61919404d14d86  (3547 bytes)
  signature  sha256:31d45f601f4b426605a4ea7370174e15d82e10d89e82a918ac1d8efd7cd0331d  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:2023b9c2e00b0daea3e8b200f1abd4936063dcd3674136782df3fb4658548d88  (93038 bytes)
  signature  sha256:2cb03273064aefe5af603e9ec955cd8a0ca10a7b855298f04b9d03358f8fa55e  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:8c09c152b9eb46e7cb8fb05ef56e5fc6be97599c61e688ca4b6c2005a27b05ec  (229 bytes)
  signature  sha256:d6323ad3cb184d5165eb508b679cb1cfcb677f37d7e51377012fa5b5432e1a89  (vex.json.sigstore)