Attestations for
  ghcr.io/kapsl-sh/rust-rustc@sha256:77c506b7653de00c2b773535eb6148c62f037524e4e0d126b71692b386107677

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/rust-rustc@sha256:77c506b7653de00c2b773535eb6148c62f037524e4e0d126b71692b386107677

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/rust-rustc
  digest    sha256:77c506b7653de00c2b773535eb6148c62f037524e4e0d126b71692b386107677
  states    765 component(s) are inside this image
      zlib                   1:1.3.dfsg+really1.3.1-1ubuntu3 pkg:deb/ubuntu/zlib@1%3A1.3.dfsg%2Breally1.3.1-1ubun
      rust                   1.98.0                   cpe:2.3:a:rust-lang:rust:1.98.0:*:*:*:*:*:*:*
      addr2line              0.24.2                   pkg:cargo/addr2line@0.24.2
      addr2line              0.25.1                   pkg:cargo/addr2line@0.25.1
      adler2                 2.0.1                    pkg:cargo/adler2@2.0.1
      aes                    0.9.0                    pkg:cargo/aes@0.9.0
      aho-corasick           1.1.3                    pkg:cargo/aho-corasick@1.1.3
      aho-corasick           1.1.4                    pkg:cargo/aho-corasick@1.1.4
      alloc                  0.0.0                    pkg:cargo/alloc@0.0.0
      allocator-api2         0.2.21                   pkg:cargo/allocator-api2@0.2.21
      alloctests             0.0.0                    pkg:cargo/alloctests@0.0.0
      android_system_properties 0.1.5                    pkg:cargo/android_system_properties@0.1.5
      ... and 753 more

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/rust-rustc
  digest    sha256:77c506b7653de00c2b773535eb6148c62f037524e4e0d126b71692b386107677
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      6 resolved input(s)
      component-rust-std https://static.rust-lang.org/dist/2026-08-20/rust-std-1.98.0-aar
      component-rustc    https://static.rust-lang.org/dist/2026-08-20/rustc-1.98.0-aarch6
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      composed-image     compose:binutils
      composed-image     compose:cc
      apt-package        pkg:deb/ubuntu/zlib1g@1:1.3.dfsg+really1.3.1-1ubuntu3?arch=arm64
  sbom      sbom.json sha256:0ff841b90583cb1e7958fbf7f419123f...