Attestations for
  ghcr.io/kapsl-sh/bsdmainutils@sha256:ce3194a6b3473c6eaf53fd1b118f1d57f1caea19e0a789ee775fd941b5153172

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/bsdmainutils@sha256:ce3194a6b3473c6eaf53fd1b118f1d57f1caea19e0a789ee775fd941b5153172

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:212c490f23d256fc78b65186b2bc11fde967c80511be4aa19a3bc993706bfebe  (2120 bytes)
  signature  sha256:4a8b285f82077cbcd1f47c8720a8d9ef883d260d7ccf231e7c0762484358bc66  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:f80c49c6e0b1b2b6aba523bd55123fa8b966a916b866473f57e9641337b6da63  (3353 bytes)
  signature  sha256:1c0299d5feca05e3ddbb18f9c9d54c6a1efcf859ff6c1d1c908ed827ea8f60f9  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:ec532780f9329a9b8274182461bb15e1ad1db30e1259fd0d42974cdb1fd8e030  (235 bytes)
  signature  sha256:f8161f5ecedffdf4bcb574e25c8fa47466ffcb5f66c8c5564b7b030f83185375  (vex.json.sigstore)