Attestations for
  ghcr.io/kapsl-sh/cpanm@sha256:ba89bacc1f4bf6a812f7820923899795b4828b6a37c57eb174f8cc422b55482f

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/cpanm@sha256:ba89bacc1f4bf6a812f7820923899795b4828b6a37c57eb174f8cc422b55482f

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:fe2f1e28846fe68214bcda81f5f3b27e89c9b131c70161d4aaed4ec93dfc2260  (3203 bytes)
  signature  sha256:073c405391c188e42fb9fa6d09320639e294ca6b26ca7bc9fdd7eb9b2b557c98  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:b9b7e6f01faf07ab9d13916e0efcaa0dc1a94b5bb6debd9a60eefdb47fa262d8  (2383 bytes)
  signature  sha256:12cc5b15e4e9e58f2eb6f45729a27d99f24773168b8393190652183bad351199  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:3cf637d89535aa4ff05e536fbc8fdc59d37139d1a00f3e425b1d322d0efdc286  (228 bytes)
  signature  sha256:c7e02c6d98816b7df12bb4a449cccd9d338bed5d5e430fa5eda5880df3b61882  (vex.json.sigstore)