Attestations for
  ghcr.io/kapsl-sh/less@sha256:2e2f5a9cf6a153256282263eee0870aa7efca7fec32449943c0ba87e8abc312a

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/less@sha256:2e2f5a9cf6a153256282263eee0870aa7efca7fec32449943c0ba87e8abc312a

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:f4f9bb94f80751e7e0795c3a89a36a204cb00f14132b34cd784103a5c5f59995  (1758 bytes)
  signature  sha256:37a9fd762a278e55533677bbd25e42ee76a154b6ac4c11deef9d695ec7ea4d27  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:43f5506656f1b854c588164a8686a63e7bf9a83cdfc2497e7ce1ad7686dc6188  (3855 bytes)
  signature  sha256:b71236e06ce0db0ecbcb101c8e7ad796c775496d6884a0edd63b2ef29894ad9a  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:e689616ad2a51b0a5f95f8d2b22b12a49d30edb3f3e4d541d251ec1ccac001a7  (227 bytes)
  signature  sha256:9c7879b13c9505f3a04f67024c47adbcdf49e4d27d274f618e17dbc6bd198dea  (vex.json.sigstore)