Attestations for ghcr.io/kapsl-sh/ruby@sha256:569ed5fd8bb9f5fb75ce65657d68a845830b6af99b6cd509793cd42e4a5506ff Verify them yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/ruby@sha256:569ed5fd8bb9f5fb75ce65657d68a845830b6af99b6cd509793cd42e4a5506ff === cyclonedx =================================================== subject ghcr.io/kapsl-sh/ruby digest sha256:569ed5fd8bb9f5fb75ce65657d68a845830b6af99b6cd509793cd42e4a5506ff states 93 component(s) are inside this image abbrev 0.1.2 pkg:gem/abbrev@0.1.2 base64 0.2.0 pkg:gem/base64@0.2.0 benchmark 0.3.0 pkg:gem/benchmark@0.3.0 bigdecimal 3.1.5 pkg:gem/bigdecimal@3.1.5 bundler 2.5.22 pkg:gem/bundler@2.5.22 cgi 0.4.2 pkg:gem/cgi@0.4.2 csv 3.2.8 pkg:gem/csv@3.2.8 date 3.3.4 pkg:gem/date@3.3.4 debug 1.9.2 pkg:gem/debug@1.9.2 delegate 0.3.1 pkg:gem/delegate@0.3.1 did_you_mean 1.6.3 pkg:gem/did_you_mean@1.6.3 digest 3.1.1 pkg:gem/digest@3.1.1 ... and 81 more === slsaprovenance ============================================== subject ghcr.io/kapsl-sh/ruby digest sha256:569ed5fd8bb9f5fb75ce65657d68a845830b6af99b6cd509793cd42e4a5506ff build https://index.kapsl.sh/buildtype/v1 builder https://index.kapsl.sh from 24 resolved input(s) base-image ghcr.io/kapsl-sh/kapsl-base-static:latest apt-package pkg:deb/ubuntu/binutils apt-package pkg:deb/ubuntu/ca-certificates apt-package pkg:deb/ubuntu/curl apt-package pkg:deb/ubuntu/file apt-package pkg:deb/ubuntu/findutils apt-package pkg:deb/ubuntu/g++ apt-package pkg:deb/ubuntu/gcc apt-package pkg:deb/ubuntu/libffi-dev apt-package pkg:deb/ubuntu/libffi8 apt-package pkg:deb/ubuntu/libssl-dev apt-package pkg:deb/ubuntu/libssl3t64 ... and 12 more sbom sbom.json sha256:2712a79671341618e3aabbf032c68801...