Attestations for
  ghcr.io/kapsl-sh/util-linux@sha256:a4f75296e8a2446a53cf3f30b4cd9a61179c39f55bf266e041eff3fcc9680ff3

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/util-linux@sha256:a4f75296e8a2446a53cf3f30b4cd9a61179c39f55bf266e041eff3fcc9680ff3

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:8a84f12cdc7ef90da2fd55880a6a071d80db33c0876990b2f22b0b8667a82aae  (1931 bytes)
  signature  sha256:b2ff3305d538808a988cd1c14e1444c75cd185612bbd09f428dc02f241e37fa5  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:6a478e7fe920006311b5d27045b45add86cfd6d20929b9d7fd1c3691c1223e94  (11627 bytes)
  signature  sha256:18843d0944836868e17eab1c6464ecbc3754983685a7143ee4407791946b2f40  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:7f3be619c3312fa452bc506f4bd49bd0f7858f5f5582c0f263249776d25dfd03  (233 bytes)
  signature  sha256:5aaf83c1261c4234258f816ac32d902e1f3a160b069515fb8a1e291b7a43050c  (vex.json.sigstore)