Attestations for
  ghcr.io/kapsl-sh/rust-cargo@sha256:64524318ea7bccbf77430b2f1624f30131b8b5e32135cfac27198aee4f95db05

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/rust-cargo@sha256:64524318ea7bccbf77430b2f1624f30131b8b5e32135cfac27198aee4f95db05

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/rust-cargo
  digest    sha256:64524318ea7bccbf77430b2f1624f30131b8b5e32135cfac27198aee4f95db05
  states    550 component(s) are inside this image
      rust                   1.98.0                   cpe:2.3:a:rust-lang:cargo:1.98.0:*:*:*:*:*:*:*
      adler2                 2.0.1                    pkg:cargo/adler2@2.0.1
      aho-corasick           1.1.4                    pkg:cargo/aho-corasick@1.1.4
      alloca                 0.4.0                    pkg:cargo/alloca@0.4.0
      allocator-api2         0.2.21                   pkg:cargo/allocator-api2@0.2.21
      android_system_properties 0.1.5                    pkg:cargo/android_system_properties@0.1.5
      anes                   0.1.6                    pkg:cargo/anes@0.1.6
      annotate-snippets      0.12.16                  pkg:cargo/annotate-snippets@0.12.16
      anstream               1.0.0                    pkg:cargo/anstream@1.0.0
      anstyle                1.0.14                   pkg:cargo/anstyle@1.0.14
      anstyle-hyperlink      1.0.2                    pkg:cargo/anstyle-hyperlink@1.0.2
      anstyle-lossy          1.1.5                    pkg:cargo/anstyle-lossy@1.1.5
      ... and 538 more

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/rust-cargo
  digest    sha256:64524318ea7bccbf77430b2f1624f30131b8b5e32135cfac27198aee4f95db05
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      6 resolved input(s)
      component-cargo    https://static.rust-lang.org/dist/2026-08-20/cargo-1.98.0-x86_64
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      composed-image     compose:binutils
      composed-image     compose:cc
      composed-image     compose:rustc
      composed-image     compose:rustdoc
  sbom      sbom.json sha256:002e62ad92e5c4b5b1152f1fff9d5333...