Attestations for
  ghcr.io/kapsl-sh/elixir@sha256:43b3ac3c9cfaf5fa6e0ff6801bab9b5be9253df674d032cba59edf52aa8ac91c

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/elixir@sha256:43b3ac3c9cfaf5fa6e0ff6801bab9b5be9253df674d032cba59edf52aa8ac91c

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/elixir
  digest    sha256:43b3ac3c9cfaf5fa6e0ff6801bab9b5be9253df674d032cba59edf52aa8ac91c
  states    1 component(s) are inside this image
      elixir                 1.20.3                   pkg:generic/elixir@1.20.3

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/elixir
  digest    sha256:43b3ac3c9cfaf5fa6e0ff6801bab9b5be9253df674d032cba59edf52aa8ac91c
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      15 resolved input(s)
      release-asset-x86_64 https://github.com/elixir-lang/elixir/releases/download/v1.20.3/
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      composed-image     compose:basename
      composed-image     compose:bash
      composed-image     compose:cat
      composed-image     compose:cut
      composed-image     compose:dirname
      composed-image     compose:elixir
      composed-image     compose:env
      composed-image     compose:erl
      composed-image     compose:git
      composed-image     compose:mkdir
      ... and 3 more
  sbom      sbom.json sha256:333dd8ec367e64d70c2bc52eab836201...