Attestations for
  ghcr.io/kapsl-sh/hermes-agent@sha256:1fd5014df4cb0ba07ad39f428589d9303b4b6dfe6bc94b408b6a7dd02765528e

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/hermes-agent@sha256:1fd5014df4cb0ba07ad39f428589d9303b4b6dfe6bc94b408b6a7dd02765528e

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:4b8e1eb5e028bf26247ce625a2bfb072efe190275727c2ace0f65a40207e9419  (2082 bytes)
  signature  sha256:a6dd38f3b9c8f20e2ea3b18d1b91395b05acde9c27fb74f5f31754374b2194eb  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:508242136be69fc3fb68acce53bb332dd64fe46cfac864a1b927606859493d46  (1763999 bytes)
  signature  sha256:a2f345ef5073e27bfd4519306007bb5927a7686ff548ee266a7d429bb741883c  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:c51d4906ca4286c537fc37f2b9afa432555a0a5fb60541ed7ba3230c5a31dd3b  (235 bytes)
  signature  sha256:b76a76039550da185ac486ee3f93430f01018ada2dd611102a1d42615f33c0b3  (vex.json.sigstore)