Attestations for
  ghcr.io/kapsl-sh/hermes-agent@sha256:56f07463945fc8ce783e7db29a16ed4430f5b80f536e9ff639616da75d5164f0

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/hermes-agent@sha256:56f07463945fc8ce783e7db29a16ed4430f5b80f536e9ff639616da75d5164f0

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:67b10fe8c545539acfea24c949b6f0d45356e241b914aa0d68d21a289c7eeaa2  (2082 bytes)
  signature  sha256:ddabbaea5eb40f54ea0cc078453bda27826886842750ae7d4dd6acce64174027  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:c32b5757ede0ac8064a3117b0f8f1e0d5f7bd863e59b2ce52eab658783aa2d7d  (1764020 bytes)
  signature  sha256:76b72cf66c94d3c6e19e16d05d78968a62bf8cea4351567f02961936e1f2bd92  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:6799df86f8644c56cf4727e4c5c434bd1bcbfd003d46f5e816aa073d4301d7bc  (235 bytes)
  signature  sha256:e4f115c1ddd981bf1cabc94d554b6e9c6910484b7f61f2dedfa6c7b3d4d886bf  (vex.json.sigstore)