Attestations for
  ghcr.io/kapsl-sh/luarocks@sha256:0040a87018e6283d58f30c8c98ab71ee7d3efb7afd6e4d30487a638455da95d0

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/luarocks@sha256:0040a87018e6283d58f30c8c98ab71ee7d3efb7afd6e4d30487a638455da95d0

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:d51184732829c30b34fb1952500b7af88b98abe8e93e7bd63253587bd037ebe4  (3540 bytes)
  signature  sha256:924bdb4ad46bc6c31c03a4c1eeca6b7a04933e80a35b9a1bf78b810024fc88a7  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:ce00744b1c18e3838be4a7a5f9b77746ec3f2bafcd77f8caa68a9eec979393dd  (15269 bytes)
  signature  sha256:b78d7ef0e0f46ee53f3fa48b2f344bc02babc0459a4f6f34af1fc94a8f2ae7cb  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:c08a7457e209120ca49cde9b1b009123ccf87594aa4e300fcfd071bf9aae8e84  (231 bytes)
  signature  sha256:b83d886bbbd60059b158fb133bd8c7fec6b6e0e0b4ffcc5903c3eb4cadde3a33  (vex.json.sigstore)