Attestations for
  ghcr.io/kapsl-sh/pax@sha256:bdd6904712ac1b6254a0cbe4e9aae7c597f85533e37490e74eba0b48c0db8002

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/pax@sha256:bdd6904712ac1b6254a0cbe4e9aae7c597f85533e37490e74eba0b48c0db8002

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:70eb3cd660fe93008b44d7817054c35de74f619dc5aacc00d3e51fcaebc7bec7  (2073 bytes)
  signature  sha256:abe0350e49812aca50ca89136b626ac11a2401944f12adfa2bad8dfa7a591a83  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:9927336a2c7d9a83909318b9c80bb1d12d895de8933d709d1f3180d8576827f2  (2922 bytes)
  signature  sha256:54f772952dde37b790ceced5ffefa885bd4d7d9c0d9e7c44814e43ce44d04ab1  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:26ebb6ec240fe23ce76f219099f1e64227876b75ca680d7553902b99f606f57e  (226 bytes)
  signature  sha256:e2575ee16476304a0f7bcd1865224fd4dc665d55e865a3012a9bde27a48f487b  (vex.json.sigstore)