Attestations for
  ghcr.io/kapsl-sh/poetry@sha256:afcdc85aa26d92fbd03ad040bff107be327222adbd285ae6fc4430b619c26711

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/poetry@sha256:afcdc85aa26d92fbd03ad040bff107be327222adbd285ae6fc4430b619c26711

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:23aec01176e8ebf4ec8384eb29899b1d57dce8dd1ac9a75e97107638d8b36979  (2186 bytes)
  signature  sha256:0f8489562ad0540776def2b93a83a5efc6e1571d5dfa0c6c5806a7521d96afb6  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:3732ba994dd1672f806499afd0241b1dc8380501c2effab81cfe7ad27b899ad6  (674407 bytes)
  signature  sha256:583a32bb93a7cd2fa338170c8a6f772e4fc533e7f801459ec3f17d258ca6dc2d  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:29282dd8e66252b48c8970d1a78455adf318387acb9a2b81eb25a92395c668dc  (229 bytes)
  signature  sha256:a84f38a836ed27dcbce7cd011b81fe8534db6781a9cb6fb842d9e3f95c59b933  (vex.json.sigstore)