Attestations for
  ghcr.io/kapsl-sh/less@sha256:505544491edad5743b6b07e8ed7e5cfa2808d9265716fd50d1cc385430bfc928

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/less@sha256:505544491edad5743b6b07e8ed7e5cfa2808d9265716fd50d1cc385430bfc928

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:14059974a363ae01743497a485704b35ae9b89483ddbdd8f9311a74923ab04d6  (2061 bytes)
  signature  sha256:fb7fb1e41d49fc8530da951b73aeb528877d4c69952a3f2af11547330dc1a29a  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:42a19c0200c51f72d2fa90a2e2d0336e2bd4979298dea5439d4a16026957edae  (3855 bytes)
  signature  sha256:4e526635765608fbb102a1b76bd97a5d83b9161a753f57b3904c0d8da3cd7f5f  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:cacd9bd233cb8087c7c7021432d94d60da7e7183e3934afc578138df4d1bcccc  (227 bytes)
  signature  sha256:ad240513bb15ae15fd842f58a9bc92bd37637c7c596263ca2e49a580e582095d  (vex.json.sigstore)