Attestations for
  ghcr.io/kapsl-sh/opencode@sha256:79000f11d5cdfd3fa1eab04dbfb95bd9b596e46f4abf394f4ecd5eee109bef20

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/opencode@sha256:79000f11d5cdfd3fa1eab04dbfb95bd9b596e46f4abf394f4ecd5eee109bef20

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:faf01f7b3353be64cb9152d8e689709716e850c121e16c3ce446edd26fab6a33  (3173 bytes)
  signature  sha256:43250ef1b47011325a28d03d3ca93065228f6983a7b780a01a75dc89c77ff5e7  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:ab12c0c1f15488d66e6b82b854814fe5467a44db1a8238006549187c9c421540  (125555 bytes)
  signature  sha256:45a2961e9e6fcc53d309b9d2a11e0cc56c2d175c8ffc8c6a61144b05db464cde  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:49ae7eda9b632590e65746b4fac9d6b0f586a6e3ba7ecb541a946f05ed06c0d2  (231 bytes)
  signature  sha256:f8be943ab75b84e51fd3eb3c13fec1d8782762241b2e9b67d576ee37e7f99011  (vex.json.sigstore)