Attestations for ghcr.io/kapsl-sh/k9s@sha256:629637cc4777f17f6fcca682cb77b17c531397e80f59bdea744f3366f60404db Signed at seal time, arm64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/k9s@sha256:629637cc4777f17f6fcca682cb77b17c531397e80f59bdea744f3366f60404db === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:f50dd66f7d6e16780e2e262b2137f706708559846f1db5e45c8634cb839e1466 (1734 bytes) signature sha256:1ecbcf94089881db1ba53c0b523e6839033abe815c3881c252c1bde7a683bfc6 (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:92d32c5dd7901e9db7d3550dea0f273438441453640c5e2f315fd1878d77d7b0 (611895 bytes) signature sha256:d6b7535b01c110d952988599f4aa52b74fd4633d6100ca225dde46148437498e (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:b0d574fd69f084aafbd542035c1af94a46ee44000d5ee388f1ac48f76b5b0971 (226 bytes) signature sha256:0215eb49c06a990587c31213f82c4d791ca3218573076c61644aefc39d413c9c (vex.json.sigstore)