Attestations for
  ghcr.io/kapsl-sh/less@sha256:5b2446d102a75c18e3c992289151af6b3f6614dfbb0efd6dd2c4cadacb10a215

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/less@sha256:5b2446d102a75c18e3c992289151af6b3f6614dfbb0efd6dd2c4cadacb10a215

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:5419053b209bdfa8906c1d4594613f7f8a95a41e69360389453d6b3e35571c10  (1758 bytes)
  signature  sha256:37ee5737a91552d7d35f37e5fb751eb8c0261f9731bde53e3385e23afd9f86d2  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:3c7a5a313a3170304f2f7f910d78da31670dcb453fb23b1560b89dcb30044089  (3855 bytes)
  signature  sha256:4932976eb36e20c5d1de68bf6dd9aad9882c2843b101d3e22dd41d7323102dc5  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:a66440f854d885772e63276bcaca73d58408ded7ec0b17415781c6238c54f326  (227 bytes)
  signature  sha256:ac1e85d25e80142ad60a1b8dd5668b0ab70cde5644675e22af9d66954353d88f  (vex.json.sigstore)