Attestations for
  ghcr.io/kapsl-sh/less@sha256:62a48eb0d8c80bc6f3941ba88f9d52a2ad81a071ecf4b08f073a75621f361e8f

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/less@sha256:62a48eb0d8c80bc6f3941ba88f9d52a2ad81a071ecf4b08f073a75621f361e8f

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:7fd3a2f82598ac4d1a5906317f1a0841adb59050ad5612ee8f32c0dad4cc3218  (2061 bytes)
  signature  sha256:a1eeb7ad2941dbc0b4c8ffc57f28dda3f0b3bcd1837510b2f6021fdfcdb16de3  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:b31e71b5ac02546f33be52688ed0115b9d322409c4325bab12c3254ac2d51aca  (3855 bytes)
  signature  sha256:d71cbf0a5d9aa8f7a2bbb8a9a5180476290eb71d4d6f3c606562ed7459ea5aaf  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:1bf8fbc3678ed07cdb06371a61b6612b91dee3542b4c28f1b266de256b66bdac  (227 bytes)
  signature  sha256:bc57e2d2d0b1d71ce5da98b1fcf870edb4c7fc75deb5b17de14772abb16d5ed0  (vex.json.sigstore)