Attestations for
  ghcr.io/kapsl-sh/ncurses@sha256:412f6bbb1c31d2183607262fa7cced084d4ebfb871da0211fed72e076825ae8a

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/ncurses@sha256:412f6bbb1c31d2183607262fa7cced084d4ebfb871da0211fed72e076825ae8a

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:5bf0a404b6a7088ee72a919ec1ba3eb0841d2d14449ccee1a2fc53c2b9d22086  (2083 bytes)
  signature  sha256:796a6cab1109acee37bc0084f93c70cb0a848c74ad57f5c2475ff16b0058556a  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:28bafea1e80f52c77e45ff11412ddac6e6fd730566729e22088639f7830b1252  (3203 bytes)
  signature  sha256:101acb91ee10d6bf6339789631254a13e0240f1639fa5f0136785303e8601b8e  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:4f3caac3bb36752ba4f8277f9b4393aa22d55a7b9f47050a44b0271792052492  (230 bytes)
  signature  sha256:b939390c09f21619ae1528ab5834ebb02c5c5ed81dad9d27aa0803e404bdc026  (vex.json.sigstore)