Attestations for
  ghcr.io/kapsl-sh/python@sha256:7a47128f03ec24f1416226df53f30668284f5d3e2f82a079af9a6a322471df53

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/python@sha256:7a47128f03ec24f1416226df53f30668284f5d3e2f82a079af9a6a322471df53

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/python
  digest    sha256:7a47128f03ec24f1416226df53f30668284f5d3e2f82a079af9a6a322471df53
  states    15 component(s) are inside this image
      bzip2                  1.0.8-6build2            pkg:deb/ubuntu/bzip2@1.0.8-6build2?distro=ubuntu-26.
      db5.3                  5.3.28+dfsg2-10ubuntu1   pkg:deb/ubuntu/db5.3@5.3.28%2Bdfsg2-10ubuntu1?distro
      expat                  2.7.4-1                  pkg:deb/ubuntu/expat@2.7.4-1?distro=ubuntu-26.04
      gdbm                   1.26-1build1             pkg:deb/ubuntu/gdbm@1.26-1build1?distro=ubuntu-26.04
      libffi                 3.5.2-4                  pkg:deb/ubuntu/libffi@3.5.2-4?distro=ubuntu-26.04
      libzstd                1.5.7+dfsg-3             pkg:deb/ubuntu/libzstd@1.5.7%2Bdfsg-3?distro=ubuntu-
      mpdecimal              4.0.1-6                  pkg:deb/ubuntu/mpdecimal@4.0.1-6?distro=ubuntu-26.04
      ncurses                6.6+20251231-1           pkg:deb/ubuntu/ncurses@6.6%2B20251231-1?distro=ubunt
      openssl                3.5.5-1ubuntu3.4         pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.4?distro=ubunt
      readline               8.3-4                    pkg:deb/ubuntu/readline@8.3-4?distro=ubuntu-26.04
      sqlite3                3.46.1-9ubuntu0.2        pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.2?distro=ubun
      util-linux             2.41.3-3ubuntu2          pkg:deb/ubuntu/util-linux@2.41.3-3ubuntu2?distro=ubu
      ... and 3 more

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/python
  digest    sha256:7a47128f03ec24f1416226df53f30668284f5d3e2f82a079af9a6a322471df53
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      45 resolved input(s)
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      apt-package        pkg:deb/ubuntu/binutils
      apt-package        pkg:deb/ubuntu/ca-certificates
      apt-package        pkg:deb/ubuntu/curl
      apt-package        pkg:deb/ubuntu/file
      apt-package        pkg:deb/ubuntu/findutils
      apt-package        pkg:deb/ubuntu/g++
      apt-package        pkg:deb/ubuntu/gcc
      apt-package        pkg:deb/ubuntu/libbluetooth-dev
      apt-package        pkg:deb/ubuntu/libbz2-1.0
      apt-package        pkg:deb/ubuntu/libbz2-dev
      apt-package        pkg:deb/ubuntu/libdb-dev
      ... and 33 more
  sbom      sbom.json sha256:98da5dfcc902bb85f4e0e2a9275aaaca...