Attestations for ghcr.io/kapsl-sh/wget@sha256:54f97af06ed6720e18f0846da5abeefe9813f10839d24b3a379b7ccf6dce5e70 Verify them yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/wget@sha256:54f97af06ed6720e18f0846da5abeefe9813f10839d24b3a379b7ccf6dce5e70 === cyclonedx =================================================== subject ghcr.io/kapsl-sh/wget digest sha256:54f97af06ed6720e18f0846da5abeefe9813f10839d24b3a379b7ccf6dce5e70 states 11 component(s) are inside this image gmp 2:6.3.0+dfsg-5ubuntu2 pkg:deb/ubuntu/gmp@2%3A6.3.0%2Bdfsg-5ubuntu2?distro= gnutls28 3.8.12-2ubuntu1.1 pkg:deb/ubuntu/gnutls28@3.8.12-2ubuntu1.1?distro=ubu libffi 3.5.2-4 pkg:deb/ubuntu/libffi@3.5.2-4?distro=ubuntu-26.04 libpsl 0.21.2-1.1build2 pkg:deb/ubuntu/libpsl@0.21.2-1.1build2?distro=ubuntu libtasn1-6 4.21.0-2 pkg:deb/ubuntu/libtasn1-6@4.21.0-2?distro=ubuntu-26. p11-kit 0.26.2-2 pkg:deb/ubuntu/p11-kit@0.26.2-2?distro=ubuntu-26.04 pcre2 10.46-1build1 pkg:deb/ubuntu/pcre2@10.46-1build1?distro=ubuntu-26. util-linux 2.41.3-3ubuntu2 pkg:deb/ubuntu/util-linux@2.41.3-3ubuntu2?distro=ubu wget 1.25.0-2ubuntu4.4 pkg:deb/ubuntu/wget@1.25.0-2ubuntu4.4?distro=ubuntu- zlib 1:1.3.dfsg+really1.3.1-1ubuntu3 pkg:deb/ubuntu/zlib@1%3A1.3.dfsg%2Breally1.3.1-1ubun nettle 3.10.2-1 pkg:deb/ubuntu/nettle@3.10.2-1?distro=ubuntu-26.04 === slsaprovenance ============================================== subject ghcr.io/kapsl-sh/wget digest sha256:54f97af06ed6720e18f0846da5abeefe9813f10839d24b3a379b7ccf6dce5e70 build https://index.kapsl.sh/buildtype/v1 builder https://index.kapsl.sh from 2 resolved input(s) base-image ghcr.io/kapsl-sh/kapsl-base-static:latest apt-package pkg:deb/ubuntu/wget@1.25.0-2ubuntu4.4?arch=arm64 sbom sbom.json sha256:8f2a17268753f561b16ee41484129c50...