Attestations for
  ghcr.io/kapsl-sh/bsdextrautils@sha256:b9620feb28e5a04cf6c59f708d55f7feb1617daa31c3a180ca7be3d97cee1636

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/bsdextrautils@sha256:b9620feb28e5a04cf6c59f708d55f7feb1617daa31c3a180ca7be3d97cee1636

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:057cc03c1d30df3c296e4e069a2510673415e2ca048db9baaf5a6d5a16904bde  (1814 bytes)
  signature  sha256:4f373afe6df4009a49a8d9340a07800849dbd5866f11f6214fb1215f5d335962  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:1f616f20f331fda3d861eca2a9962cadf663a237a0ed304ff3490b1dfdfe0335  (7409 bytes)
  signature  sha256:8e85155961c172646ff27ced519f65dfe211421d6fffa5160627d2091bc5dfe7  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:bdea7d18faa77839c6822cb975e0ab499ab0ab62c9097839cd4b50e481ba2512  (236 bytes)
  signature  sha256:cbda5d7f3f54ce7775b0d97f0c3d3e978ddd58537e1fb4bf87da5d5070c9db31  (vex.json.sigstore)