Attestations for
  ghcr.io/kapsl-sh/iputils@sha256:22a099822c6b50214215ba61e59237175600189e34621c5d6bb624336bbb91b5

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/iputils@sha256:22a099822c6b50214215ba61e59237175600189e34621c5d6bb624336bbb91b5

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:46d5dab84deacbfec948f1f21bb372745b16d2872ab725d1b5581c179972f841  (1796 bytes)
  signature  sha256:0aaa256a361f7b04d38d7e220cc940c2ded06fac40104c971f441cee3f1ad3e3  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:d6c05915d286a16a14fe6ceda3cf72fbe51d959aad26abab7c9e8e369983b006  (3937 bytes)
  signature  sha256:60b70c9f2b4594b40510f201d068f19aa1ebd2329095ddfc61a7b09a70026350  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:607cf1a9548b31a84c24dcc6d6622e842be74d8fb1ec142c30b4ef22cc13cb4e  (230 bytes)
  signature  sha256:4d32f3fc1f06423d7ae682cb2541382996d9a97628d5a18a581dc06ad5599b25  (vex.json.sigstore)