Attestations for
  ghcr.io/kapsl-sh/pylint@sha256:05c87379a1cb018a1dc0f3538eef555306e38cca6d06cbcfefd75df2883752a9

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/pylint@sha256:05c87379a1cb018a1dc0f3538eef555306e38cca6d06cbcfefd75df2883752a9

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:39e9201b70fb877c43cbeeab0ffd24bbffa3d8e6edd277d8d44f87040cb09384  (2055 bytes)
  signature  sha256:2e91d08f42009820ff3d29a72b32c4bae1f2bde56d17e5cc0b52c4d7ecd0010a  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:a72f670f33715d6cd5066aa4d34a1b62f33db9131f000eb36b2eab1fcd132d46  (170419 bytes)
  signature  sha256:38ccf144035fb33ce0751a1e87981e565550600004fc67ad264d10210b86fd17  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:73e6a5af5a955e16e39d8389c60b511eb7d2ad7e8a2b155871d586d2e8c7ed38  (229 bytes)
  signature  sha256:d2e8ee019410d9bdff8a1a230170d900238acff226176532ce84993e3c921df3  (vex.json.sigstore)