Attestations for
  ghcr.io/kapsl-sh/bind9@sha256:bf0bca15887975aad4f3b7eecc72576ef8a163465e40fd118f14a5dc605bf736

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/bind9@sha256:bf0bca15887975aad4f3b7eecc72576ef8a163465e40fd118f14a5dc605bf736

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:2ac548044c7284bf058526d8a74542a46464bddeced6488b55799218e1a795e1  (1791 bytes)
  signature  sha256:c8cd62d3e204e9b8fc70510e23e351517027e36f165623ff7b96a11cf50bef52  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:66113af6070d5d1547c6f0480bbd39cdf28b9f0ea539d618c7f512eb1d9b40a3  (23822 bytes)
  signature  sha256:fdecb3425911cbfd01f7a4893b5e630d2a837200cf61a708124252a75b906566  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:ce810bac3383874545bff40687caf0793cd43c4e0eab5f505df95c510056c6df  (2014 bytes)
  signature  sha256:0c0b31ce2ce233096234098283bd5b4be591cf26cbadaf6baa5560196bb91d13  (vex.json.sigstore)