Attestations for
  ghcr.io/kapsl-sh/pax@sha256:199654b72d7b646d170344218b704be75f9999499bcdf367969c1125f7264712

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/pax@sha256:199654b72d7b646d170344218b704be75f9999499bcdf367969c1125f7264712

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:30b138a1124e717c469982700daf0294a572e380adffcb36a402eb4c178c7577  (2073 bytes)
  signature  sha256:6eff4d7f4e6c61405be11268ae7faccc15e5c2743f4af498a169499a1e0e2f4e  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:3d2ac521d4cf482a864e1add7c363e648eaad2b07ccc7472a2ab5b63dabb5f48  (2922 bytes)
  signature  sha256:04932d07f06953721f9b3cb5e4ee8ed2fae515e5e49f4999961acdaa780be315  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:7c7c8de066cb282a709af49f75c5ab702d82ac3462cc51664399a171162d2508  (226 bytes)
  signature  sha256:2b76d163001cebd254efa2778a9a70ef6d538b870d41700a3d7b016e7119a162  (vex.json.sigstore)