Attestations for
  ghcr.io/kapsl-sh/omp@sha256:baf0eca7ebdba5a9ab871c5548aa204040873af1f59f2820410a2dbd114f95eb

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/omp@sha256:baf0eca7ebdba5a9ab871c5548aa204040873af1f59f2820410a2dbd114f95eb

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/omp
  digest    sha256:baf0eca7ebdba5a9ab871c5548aa204040873af1f59f2820410a2dbd114f95eb
  states    555 component(s) are inside this image
      omp                    18.0.6                   pkg:npm/@oh-my-pi/pi-coding-agent@18.0.6
      @anush008/tokenizers   0.0.0                    pkg:npm/@anush008/tokenizers@0.0.0
      @anush008/tokenizers-darwin-universal 0.0.0                    pkg:npm/@anush008/tokenizers-darwin-universal@0.0.0
      @anush008/tokenizers-linux-x64-gnu 0.0.0                    pkg:npm/@anush008/tokenizers-linux-x64-gnu@0.0.0
      @anush008/tokenizers-win32-x64-msvc 0.0.0                    pkg:npm/@anush008/tokenizers-win32-x64-msvc@0.0.0
      @ark/attest            0.56.3                   pkg:npm/@ark/attest@0.56.3
      @ark/fs                0.56.2                   pkg:npm/@ark/fs@0.56.2
      @ark/schema            0.56.2                   pkg:npm/@ark/schema@0.56.2
      @ark/util              0.56.2                   pkg:npm/@ark/util@0.56.2
      @babel/code-frame      7.29.7                   pkg:npm/@babel/code-frame@7.29.7
      @babel/compat-data     7.29.7                   pkg:npm/@babel/compat-data@7.29.7
      @babel/core            7.29.7                   pkg:npm/@babel/core@7.29.7
      ... and 543 more

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/omp
  digest    sha256:baf0eca7ebdba5a9ab871c5548aa204040873af1f59f2820410a2dbd114f95eb
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      7 resolved input(s)
      release-asset-x86_64 https://github.com/can1357/oh-my-pi/releases/download/v18.0.6/om
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      composed-image     compose:bash
      composed-image     compose:findutils
      composed-image     compose:gawk
      composed-image     compose:git
      composed-image     compose:grep
  sbom      sbom.json sha256:16a3dad5fdbdaf4fc593a9409d949962...