Attestations for
  ghcr.io/kapsl-sh/util-linux@sha256:cebff1d00733d2cfc2b8fe215ec8e02b96604ca32b6d1c521c493c6b5d78caa4

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/util-linux@sha256:cebff1d00733d2cfc2b8fe215ec8e02b96604ca32b6d1c521c493c6b5d78caa4

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:0e12111b7309ce1bf8fe3010be14635c9f280f02e239f51ab5ee22d5975dcc44  (2234 bytes)
  signature  sha256:4f4812381077ed7dcedec8aa035cd49736fc0e43b2738c2b778344db28e04a95  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:2a7defb1db3c41a5b7d760efcf5781b2c36aff617f2e2d38ee599a1e8e750963  (11627 bytes)
  signature  sha256:1a21c6fa22420aa482fcb194f34a4b2cf40da1cf2041bc6ccb034a1de36fa4ff  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:9ddaf973e3c96cf75e761914c8d736891617bcd641366a5e22e7ea6eba86af32  (233 bytes)
  signature  sha256:67efb3f8defac79370a432818355631cd2392e6ba25bec3eaa05afb3dddda1e9  (vex.json.sigstore)