Attestations for ghcr.io/kapsl-sh/omp@sha256:b840c42de5ad19574b3b6fc6adbc6954bd326f30a0def4c1ddc60c9296797820 Signed at seal time, amd64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/omp@sha256:b840c42de5ad19574b3b6fc6adbc6954bd326f30a0def4c1ddc60c9296797820 === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:a557567396b1811af819b336ec3047e3820c60c4c799681704c340b5e1055cd8 (2688 bytes) signature sha256:98707d540e372fc54560e9411516ed3d62b6833da29b9f035e9b741b66f92984 (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:a65bc7fdc6a951c60bd04eb93376f865f80d587e21a21cb5e01e3561ca16571b (88297 bytes) signature sha256:40f8c82801342466834fe4e401d8221de586357487c82a82a0a27fe387762f17 (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:5294ae42e39cd3f9e07448060bc5fe6c8bf44cc9fc39b99794e2f4052929a033 (226 bytes) signature sha256:4cf7d2c2e4129e7db15864b261d698b5921feef182b4f4524a3b214d8ff94a35 (vex.json.sigstore)