Attestations for
  ghcr.io/kapsl-sh/uv@sha256:1a5f046f44e120ff8f50616c314255413bcff05c97340774db007e2ffd302d71

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/uv@sha256:1a5f046f44e120ff8f50616c314255413bcff05c97340774db007e2ffd302d71

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:e2798bcd5246993a35b7d0f2e7b5c1942cb1490055ab695fc43941981f4b7cef  (3086 bytes)
  signature  sha256:0456fc4ab84aaa702342aeae312f917876a3bbd07574f0466a418faebc5cf731  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:0cf472924be6f812505340b9e248b9c28169a5737f65380ea5a2af6c6af1c98a  (1092612 bytes)
  signature  sha256:327b4b459f4088c6d6456273af04b8c9adfcdf870a9099825912adbac6ffca8a  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:02e45ed9dc61faeb0e9e84dc1c068df10c941f03bcd9d9c73535ed7a557490b0  (225 bytes)
  signature  sha256:f7b80f584c93edb0ab5085629d9b5a2c0fd143187c392131afb93f272d60fa1b  (vex.json.sigstore)