Attestations for ghcr.io/kapsl-sh/util-linux@sha256:aa79be3cfa7817210acafe5331a10b3c4902339c09a93078a58eba5ef8438388 Signed at seal time, arm64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/util-linux@sha256:aa79be3cfa7817210acafe5331a10b3c4902339c09a93078a58eba5ef8438388 === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:ff9e350b127e8ee206ec23cd9034dffec59023ca1ec60dd1d805c82c6e78bc70 (2234 bytes) signature sha256:b40f232a78e094f0663a6c33b9646873143fc39d87e01756998984622dab3026 (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:e5c806bb40f66a364ad818297e884979dca42e69ccea626b83e671de05e92268 (11627 bytes) signature sha256:e1f5ebe7e865416f003b63a7c037d9da26a34a82d7993a2bae1cb1359b89fbef (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:45593c6c49f31ebf4e27ab8ee7def13557c9f0063b004639481e648da2ef7b09 (233 bytes) signature sha256:ec8f397f4846093656df2d4b85e1d570202db48d5192e4f5013dcb4819c3319c (vex.json.sigstore)