Attestations for
  ghcr.io/kapsl-sh/opencode@sha256:09495ed93206b43839d06dc320112f41fd5fe4dcddda1c209bb12d65b436b684

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/opencode@sha256:09495ed93206b43839d06dc320112f41fd5fe4dcddda1c209bb12d65b436b684

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:2ed985789671de649b48cb3e0c9add9d41df6aabf62970c27ffa3cd57f297649  (3174 bytes)
  signature  sha256:fafa9592b0127d46b707a81be28e876bb7ded218fe540185cf1d194925b6e236  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:0aa3bf5eb7a7e7da6e7d122a638fb0977b2f8ed9bbbb558b4681f77ba719cd0c  (125555 bytes)
  signature  sha256:5b7780225e6f28b880a5da5ee6b342e58ce64592305dcdfe9b8d56b22d834292  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:2a42115d1f37e965a38f7dce1cfb9642aa2779879de1ff6e2951f40a9bdeedea  (231 bytes)
  signature  sha256:68ccd02c89e7a837acd89f8248d686ba69d81239b1ae8e6ae1196f12b872fe7a  (vex.json.sigstore)