Attestations for
  ghcr.io/kapsl-sh/ncurses@sha256:2f2e8d0816dcaa1e8ce4d868a39ec03fe14c045bb4ce29b2dfe0a8c501669ae7

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/ncurses@sha256:2f2e8d0816dcaa1e8ce4d868a39ec03fe14c045bb4ce29b2dfe0a8c501669ae7

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:01444787f4cb0d10a40d46a50539bddb833d874e685136b3cdfbf19e4043b451  (2083 bytes)
  signature  sha256:3f89d6868dbdc5cb2ac1b4fcc42d942bf0b69416f24c52b039e65a47aac82e66  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:c056fa0bbb56736f60b23c6ca2a48d0bb2107b56c74735705e4ea1a66a4906f6  (3203 bytes)
  signature  sha256:38d5a439dda00f546e538faf54016c618fb479ef35ac65fddd9ab3507b791ec9  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:6fa386f1f31b97b8e537545549df5f9a1fb22a419e26ddf86772aee5aad2a85d  (230 bytes)
  signature  sha256:7b1d8e819dbc417451b60f77155994ba6f45d22f417a438fbdbfdccbe25d3c51  (vex.json.sigstore)