Attestations for
  ghcr.io/kapsl-sh/iputils@sha256:1afe774bb81ef2c825532be9846bc73d4475cb6f53738c1edd617789813a8f50

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/iputils@sha256:1afe774bb81ef2c825532be9846bc73d4475cb6f53738c1edd617789813a8f50

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:8ae964fe3298c0ab0b727bd9360e1a7772a6b50b98b616a913822b1af9a41ddb  (1796 bytes)
  signature  sha256:fb509bd9fbbab3fa51135fe39cb372ff838dbb80a8e6a50a1a739970fa890311  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:0111392d00546f21423e1141185ef1027abe586da3a5b6945356f3c91b100a29  (3343 bytes)
  signature  sha256:0276c2c3aef62b701c8580744559195ddff2fb30762c811d8bbbf7efa23c2fc7  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:4a9ace185d3f4532e9fc57101c91ef378cd158a4d53023f0d4c7eb816bf553b9  (230 bytes)
  signature  sha256:30cb676e76f824ede668637b2801738f8765f8cef85394b388e074460d2016e8  (vex.json.sigstore)