Attestations for
  ghcr.io/kapsl-sh/file@sha256:3fca1ed987c746c65ba78e2b0ec0a87c81af498783d82ff2f9dab15062a61b39

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/file@sha256:3fca1ed987c746c65ba78e2b0ec0a87c81af498783d82ff2f9dab15062a61b39

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:4ae4d11f57072f1650c0654239114f96e90c3a414b1ee188d0f29df9f9a38391  (2195 bytes)
  signature  sha256:2fa7cf9288cc6681445976d112a644f6deab897d67840d788a5fa24fce8b3e2a  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:058206dab94cd64c86bb033b7be9e0d569859cc7cb2c18f5202b37d20f7ef2e7  (6795 bytes)
  signature  sha256:c20648396ed4e23f5630664574d39c151aabb33452d08a5a608bb76c61f15ad3  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:00280392637e7bb689c1e3881393252369442d7748d8f74f3ad0a56443ce8112  (3574 bytes)
  signature  sha256:9fd067399a0d44f6ad0e8d1b09af23e60f27320ce606342f0f98275a8337fdd2  (vex.json.sigstore)