Attestations for
  ghcr.io/kapsl-sh/uv@sha256:b4340efa519b9e654cf432cc26ff1325f5a2ce3eeebbe14da138ffa61e038ac2

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/uv@sha256:b4340efa519b9e654cf432cc26ff1325f5a2ce3eeebbe14da138ffa61e038ac2

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:b51a09083d0a736667183a46e3a6807a2c45d09c73d2168460b6fbc8f6b935fc  (3085 bytes)
  signature  sha256:a68acba6d5b6fbcfa7787a791caff43c68bbfcae26159aedbf6c49c7a25f27c8  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:200e0cdae1ac62b5996bda3f6b9caa13fc433eb2310ee0724458dee56d8472e9  (1092266 bytes)
  signature  sha256:821cfddb9fa38eecbb423e98944b6bcca0c182639f45d0c484dc53d542c5e17c  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:17e6508ce5b6a2617980cb0bcd328a0b003e4003f8795b3a1682ab644849b33b  (225 bytes)
  signature  sha256:1d08e9ec05d0e2124568f1e08dce9f90cc8f58f3c713b6f6563a3273177a67ed  (vex.json.sigstore)