Attestations for ghcr.io/kapsl-sh/util-linux@sha256:50b7cd27461741afd9ca350f2fb945903611e8e9979f8b1df9cb396c67b26763 Signed at seal time, amd64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/util-linux@sha256:50b7cd27461741afd9ca350f2fb945903611e8e9979f8b1df9cb396c67b26763 === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:4f5de8feac5078b3d127391278ac387c1ba1a3a6df33a9cc825ba20e70c9cbb8 (1931 bytes) signature sha256:8846fc3878afdcfca150b402f20a8fd831b97ecc742ff42188f77ce77b2a8902 (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:70f63812746884def53174faafbc9409cea4338f73fb177ed7c01c3845c8f83b (11627 bytes) signature sha256:ee0ef4d34de65c6b080536416ead3a3f8bf28315002d3d6929a98f17a5684375 (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:c906eb1d2ab7e64a781c5425fc675c2f74d2db0f856e266f61d7f4d84ea6045a (233 bytes) signature sha256:4e68e485706ecbfd89305e126ab64a2d29a58d325110471f71d43666f1d56eca (vex.json.sigstore)