Attestations for
  ghcr.io/kapsl-sh/ruby@sha256:610a4ffb80efa5d0ecd9bff5f175ec5d314f57743a20ac07b0b3faa552c4f9c5

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/ruby@sha256:610a4ffb80efa5d0ecd9bff5f175ec5d314f57743a20ac07b0b3faa552c4f9c5

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/ruby
  digest    sha256:610a4ffb80efa5d0ecd9bff5f175ec5d314f57743a20ac07b0b3faa552c4f9c5
  states    95 component(s) are inside this image
      abbrev                 0.1.2                    pkg:gem/abbrev@0.1.2
      base64                 0.2.0                    pkg:gem/base64@0.2.0
      benchmark              0.4.0                    pkg:gem/benchmark@0.4.0
      bigdecimal             3.1.8                    pkg:gem/bigdecimal@3.1.8
      bundler                2.6.9                    pkg:gem/bundler@2.6.9
      cgi                    0.4.2                    pkg:gem/cgi@0.4.2
      csv                    3.3.2                    pkg:gem/csv@3.3.2
      date                   3.4.1                    pkg:gem/date@3.4.1
      debug                  1.11.0                   pkg:gem/debug@1.11.0
      delegate               0.4.0                    pkg:gem/delegate@0.4.0
      did_you_mean           2.0.0                    pkg:gem/did_you_mean@2.0.0
      digest                 3.2.0                    pkg:gem/digest@3.2.0
      ... and 83 more

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/ruby
  digest    sha256:610a4ffb80efa5d0ecd9bff5f175ec5d314f57743a20ac07b0b3faa552c4f9c5
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      24 resolved input(s)
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      apt-package        pkg:deb/ubuntu/binutils
      apt-package        pkg:deb/ubuntu/ca-certificates
      apt-package        pkg:deb/ubuntu/curl
      apt-package        pkg:deb/ubuntu/file
      apt-package        pkg:deb/ubuntu/findutils
      apt-package        pkg:deb/ubuntu/g++
      apt-package        pkg:deb/ubuntu/gcc
      apt-package        pkg:deb/ubuntu/libffi-dev
      apt-package        pkg:deb/ubuntu/libffi8
      apt-package        pkg:deb/ubuntu/libssl-dev
      apt-package        pkg:deb/ubuntu/libssl3t64
      ... and 12 more
  sbom      sbom.json sha256:7c98c9b2091041213ee3269a70ecf74d...