Attestations for
  ghcr.io/kapsl-sh/nodejs@sha256:63dde16463e169a9d3cfe1a86f929a614b484b703f4e9556246252bed677ba6b

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/nodejs@sha256:63dde16463e169a9d3cfe1a86f929a614b484b703f4e9556246252bed677ba6b

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:48108b21373cc0d49ff6bea2eb426cf61cd7fed05b78d84b36d1c3b474c0bdf2  (5551 bytes)
  signature  sha256:42f6b1810358108bcf8a84802f60ed6c9be16bae17146391e9877795b03f284f  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:78d048ea7c66ebbeec01cfeaff32f626ec2587a1ce308aaa7a9df90df2f74f84  (46469 bytes)
  signature  sha256:cde68df4cf097b3cefdfd2d1c9adff5108f88bcccce8339c2691d429a7f9506a  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:853116c549ceba0b6c1baae9ec29920640bf3decc7f1a58a369220bd36859ec5  (2015 bytes)
  signature  sha256:48ac86d731457b4238de989092e9019db1906ae9855eb6d33634e79d12276264  (vex.json.sigstore)