Attestations for
  ghcr.io/kapsl-sh/syft@sha256:47484dd979e9b050810c4f804382a9a9b4ab3fdb66c54d55c91eea2d121beb91

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/syft@sha256:47484dd979e9b050810c4f804382a9a9b4ab3fdb66c54d55c91eea2d121beb91

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:26a20bb59222bc81a572656275ae927dc01d0272ba56b9b0c95545c23c3129cc  (2040 bytes)
  signature  sha256:628c0e1887bc709ea5ba290078918337dbf84a6a8ce9ae91f509b3abb4c015bb  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:832aa69ac853525aea4120ea5891d5ee04cc4cad53e376e349de54e3dd3f4e6d  (456455 bytes)
  signature  sha256:7738b90be02c0c714661d14a8218fc6a51fbbd224341b6a5bf7950a86b4b54e7  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:a96a55c9a0b0a609a81b43f5d7cd695f785eb1ddd33122c4c54ef034c10ffc1a  (227 bytes)
  signature  sha256:37f0b58a2bb58187bb6945653cf345321f2c133c942766f255fa7dc62469c622  (vex.json.sigstore)