Attestations for
  ghcr.io/kapsl-sh/syft@sha256:e5749dae6889442b09e7bcb0e64c3515fd0ac339b38780eeaaf6e3d59b7104b5

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/syft@sha256:e5749dae6889442b09e7bcb0e64c3515fd0ac339b38780eeaaf6e3d59b7104b5

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:0bad2a0dd3780a34b2c6b85fd8dc2e311224698e6f425cddfdc83c844ad94972  (2040 bytes)
  signature  sha256:d04130e6dc8a14bd9f239466f2597920f8221c4a2c256fcca4333cb7cacca6d7  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:43c00a7f328c1d00cc071c538f821e76f83d7f424a58364d3b93dcbe2d13b905  (456455 bytes)
  signature  sha256:d8140dae47a436313ec3081639260226730bd1f0aef703351945b96bf70758a7  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:2f3f68a459105d926514148c836d7625a310d292c28c662f00ecb9f2fb3bedab  (227 bytes)
  signature  sha256:ddb972ce492074ad709bd36760ec08dba2ec45d8b68cb60c83fc07752894b62f  (vex.json.sigstore)