Attestations for
  ghcr.io/kapsl-sh/poetry@sha256:40a8f0a49158427b542bce73a6d7b622a7a3b81c31b32fed402d3cf4da42c693

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/poetry@sha256:40a8f0a49158427b542bce73a6d7b622a7a3b81c31b32fed402d3cf4da42c693

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:e1718509fb97d2dfc7a76c4c84f8afc392a76498f5e33f6bdcc210a255ebc166  (2186 bytes)
  signature  sha256:1257d34cbb79a2845d3978ab66857745b34b476f6a7b00866b173e53adb34085  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:f8803f5933d80d4254effb5855b7b36a126c1db317594fd8ef40e02c18773466  (674931 bytes)
  signature  sha256:2069245973356432e3df08268610907df7db521e6c4ba2e47abe56d5570086c2  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:b72afa471b2b898a40cf3574af91b2aa6d19e5a0a511819c2fc051223b327db5  (229 bytes)
  signature  sha256:1cbc30c11162947e0ccf7a9eaca0d61b9c4fddb57431e87d6f88546d3588c08e  (vex.json.sigstore)