Attestations for
  ghcr.io/kapsl-sh/codex@sha256:c0b21c2487a89a43a637734c4485ea553377b86ec0963913319d8d9636e6863b

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/codex@sha256:c0b21c2487a89a43a637734c4485ea553377b86ec0963913319d8d9636e6863b

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:cdf46e522156f0a7d745cf8c4b6c7990749a11f5b6f81462ce16c343a0fe77a3  (3215 bytes)
  signature  sha256:74c7d31ed5d1496c411ed8c30628a7e49cb0756f45638f3cf36a0017211436cc  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:cedb7b7151717db66e508a530fd3bd96365878ea0706a808743db84fd72d7b9f  (192669 bytes)
  signature  sha256:10ca1516ba1ab4317e897e1042ce26a2bcb63a2747d797478bad215b21211e53  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:719963be19d7e0645f31622c4b75defda8390a31cc24b165f7091cf2e9deab9a  (228 bytes)
  signature  sha256:7d35795ffc38b4ebd4b0a88f7dd5104dbe487af6a03c2d50e11cd83295a37eeb  (vex.json.sigstore)