Attestations for
  ghcr.io/kapsl-sh/ruby@sha256:84fd18a4a1a8e53e243307fa516980af1b9a30c22a727304cf4ec164e14e0a7b

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/ruby@sha256:84fd18a4a1a8e53e243307fa516980af1b9a30c22a727304cf4ec164e14e0a7b

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/ruby
  digest    sha256:84fd18a4a1a8e53e243307fa516980af1b9a30c22a727304cf4ec164e14e0a7b
  states    91 component(s) are inside this image
      abbrev                 0.1.2                    pkg:gem/abbrev@0.1.2
      base64                 0.3.0                    pkg:gem/base64@0.3.0
      benchmark              0.5.0                    pkg:gem/benchmark@0.5.0
      bigdecimal             4.0.1                    pkg:gem/bigdecimal@4.0.1
      bundler                4.0.16                   pkg:gem/bundler@4.0.16
      csv                    3.3.5                    pkg:gem/csv@3.3.5
      date                   3.5.1                    pkg:gem/date@3.5.1
      debug                  1.11.1                   pkg:gem/debug@1.11.1
      delegate               0.6.1                    pkg:gem/delegate@0.6.1
      did_you_mean           2.0.0                    pkg:gem/did_you_mean@2.0.0
      digest                 3.2.1                    pkg:gem/digest@3.2.1
      drb                    2.2.3                    pkg:gem/drb@2.2.3
      ... and 79 more

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/ruby
  digest    sha256:84fd18a4a1a8e53e243307fa516980af1b9a30c22a727304cf4ec164e14e0a7b
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      24 resolved input(s)
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      apt-package        pkg:deb/ubuntu/binutils
      apt-package        pkg:deb/ubuntu/ca-certificates
      apt-package        pkg:deb/ubuntu/curl
      apt-package        pkg:deb/ubuntu/file
      apt-package        pkg:deb/ubuntu/findutils
      apt-package        pkg:deb/ubuntu/g++
      apt-package        pkg:deb/ubuntu/gcc
      apt-package        pkg:deb/ubuntu/libffi-dev
      apt-package        pkg:deb/ubuntu/libffi8
      apt-package        pkg:deb/ubuntu/libssl-dev
      apt-package        pkg:deb/ubuntu/libssl3t64
      ... and 12 more
  sbom      sbom.json sha256:010964e554dac2fef1bfff4efdc45afd...