Attestations for
  ghcr.io/kapsl-sh/luarocks@sha256:03886bf2e5f0de9e3edf3d2dae215c8965177320870d26116840e2957e4c8497

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/luarocks@sha256:03886bf2e5f0de9e3edf3d2dae215c8965177320870d26116840e2957e4c8497

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:23c07122f38910f0b25ed4cf1cb45389198c304608e7cc523f22b810d0b1e295  (3540 bytes)
  signature  sha256:e5afa2c8c03156a7d110d06b07a4a6f0ed3c2ec99ae7f2c85c762b7f3ad65750  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:aa96c5181eea173d6c012e9102316c5c6c1d7efec8f9bdcab1470128b760b7e7  (15269 bytes)
  signature  sha256:280199a5f4bae0657a52f80579044a1df4a41843488ab49293d51078afb60053  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:f320983bda0d98a20c02600c7412debf5eb0545e056b78fceb1ddc9601b34113  (231 bytes)
  signature  sha256:47a5375c3f5084d28b907c6ed102f8daedef70550f36b9e299a3b70ab54124eb  (vex.json.sigstore)