Attestations for
  ghcr.io/kapsl-sh/nvi@sha256:5636d976631d8cfb1bb6d202b94b48ea2916e04c825a780a93775ebf5611fe23

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/nvi@sha256:5636d976631d8cfb1bb6d202b94b48ea2916e04c825a780a93775ebf5611fe23

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:d538f51861d09009848b7da6dee131b34cb02da5b36bc1880f2528bed1f55b50  (2061 bytes)
  signature  sha256:8cbe1b852a05c0876ba75fd7809ffa0d82497c0514fd34a1a282587a5800f3f2  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:d4483c7b2970bfc04c68afbdf2dccab0440d40937ae8a8186f8c1685164ba93b  (5481 bytes)
  signature  sha256:d468cc0ecab20b1f18e020cd139b02d61e3c5e9eb9e42b156ae21437ff88153a  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:3ed6161d5ac9c1e141e41ba97df2291e3e28d93f4664fa2f00f554650a3efcc7  (226 bytes)
  signature  sha256:4e60bb4aa311304b5b89fd0e9971821d71a5f816716a3e96d177d287aceb5255  (vex.json.sigstore)