Attestations for ghcr.io/kapsl-sh/age@sha256:b378b3e5d79b25cdef5c47dadba1556796bbafb5098c8fd22d4972e4b5af19cd Signed at seal time, arm64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/age@sha256:b378b3e5d79b25cdef5c47dadba1556796bbafb5098c8fd22d4972e4b5af19cd === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:f6df72c5c830a551acbd9d9df42bd8ca4e7ff162ff67de98cbfc06f0e3dbc6e2 (2034 bytes) signature sha256:dea84b88fb401fb40995600fb7d289bd3691b8eeaa71d864b5a8ef74dbf8ac20 (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:7ab933e95a872d93d86777c1fd0397b2c903f8fa7fd3989e0d552edcefe558d4 (16367 bytes) signature sha256:315bcba62a02fc2c8e02883d7604e4dfe6c12990382c22840ed51b53377aa821 (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:6aab89b8d71a664f57f236300c60532867c84f8b52c37c4a1910a444196099dd (226 bytes) signature sha256:e5b7f81d4b7d1f72f1e23eec66230292de2abc95ab513c1fe62e121044d6b2c1 (vex.json.sigstore)