Attestations for
  ghcr.io/kapsl-sh/bsdextrautils@sha256:746f349f3599da1b9108ee54f49f8194c80c2ca9e80f8d43dd06b2b207720d03

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/bsdextrautils@sha256:746f349f3599da1b9108ee54f49f8194c80c2ca9e80f8d43dd06b2b207720d03

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:4653a9e368279f9cce56b7d68d0c50e85dab7bfacd5ad434fa2a809abe205754  (1813 bytes)
  signature  sha256:3ffc57d4882acade95150955367c798b578b99b83beb30e9035f1e7e83f59c47  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:3266d5917222b49cfc0d643401c7b5e8257bc6b77fdb169366be4cbd473ccb85  (7409 bytes)
  signature  sha256:cbb940bd6a7366b138f740f1464722aeaf7f5b144fbc00b83dd0db316ac075cf  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:1f9d9118606b09533e12b8b875326254afec7874ecdeae08fb540e936801526b  (236 bytes)
  signature  sha256:3c8209570944eadf20ca4be38bc00aae950c76f15bfe844bfaa2c041031dc6dd  (vex.json.sigstore)