Attestations for
  ghcr.io/kapsl-sh/nodejs@sha256:c0c6bfb0ce95d66003214633ac28042ea1c24a5c9598b0a98599104f33769dca

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/nodejs@sha256:c0c6bfb0ce95d66003214633ac28042ea1c24a5c9598b0a98599104f33769dca

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:0de6c1a1efa14c04fa489a7f6c07182e2e05dc8310b239d777a75b28fcea1f83  (5551 bytes)
  signature  sha256:7f271a77a8d1cb922db473a582229c5b27754845b4e8ba811419deeec81e2952  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:c521fcc001364470db820573fc0c7921a6b365675dc01db4bfa86f3954094050  (46469 bytes)
  signature  sha256:861d8d9e235af0b20b72475679bb4f4fe2b976fd95c4d2bde3ca0f9c8bab8e53  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:9575e8fbeb641889873d6086ef9bb0e053dc99817aed019c91ce38fe10471bb8  (2015 bytes)
  signature  sha256:38f90ac6822d6dbcfeb4db8a224d86007d918367dad23f9d1ee3446949303f4c  (vex.json.sigstore)