Attestations for ghcr.io/kapsl-sh/pylint@sha256:575463b275927c205d1dcdb10281456e79a51658587749e2464768ad180de6c0 Signed at seal time, amd64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/pylint@sha256:575463b275927c205d1dcdb10281456e79a51658587749e2464768ad180de6c0 === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:269f191f6993c7d07d035e97318110ba44696f0a87916a1fdbfc8c3e8c22fc1b (2055 bytes) signature sha256:86fa108037947ffc30df9ec95bdf013ca09b9299f85c1d148d29b4f0dbc4d4ca (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:7189b98b8216f156e2ef0cc11c614c982d5d2f8e6c13d362c2d940f0f7032937 (177685 bytes) signature sha256:73072d3ef576ac51141e1a62415c8b37651626cc3f6f56792afaa21138902b90 (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:f4d6366a45ee04a5e1897c200fc2b8038da977cd39876ee7fa3d1266fe3eddcc (229 bytes) signature sha256:36a26a82120dbbbeaa2466791c3f99613a83d7564c0cd18a4f0792ad1159ec18 (vex.json.sigstore)