Attestations for
  ghcr.io/kapsl-sh/huggingface-cli@sha256:561e4970030752e57b44f7bc975645a3d97d92ee7522cc0483bd49583ecbeabb

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/huggingface-cli@sha256:561e4970030752e57b44f7bc975645a3d97d92ee7522cc0483bd49583ecbeabb

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:01cce91b0771904f845203fd31ccb1e92a49ac264458fd936ea5bc3a23b9eba4  (2093 bytes)
  signature  sha256:0e6d372cc0313b06a93f673ad9fa7a751be2992ce8ccf1b766f097cb70e048e1  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:50a9781f6fbe40e7c0165a68a42e3b5a6e437198bccf38b64e3db434691dcfd4  (225385 bytes)
  signature  sha256:92f7d0e23a5a4e2f02dca58597b475a6f76b33e2b9809cc1574f641e87250837  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:24eed11ec5a0c55ca26018cdf6ea9cac3684f029f3e588369b0d502abd2f34bd  (238 bytes)
  signature  sha256:6a04b6f9ff2ef29167a389a3cd912e1cc9c7108ee485aa687d9cc231034382f5  (vex.json.sigstore)