Attestations for
  ghcr.io/kapsl-sh/yarn@sha256:19c3e7e31e66ce05bba800ec53e742099afcac6791529e60888f0698672dbf21

Signed at seal time, amd64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/yarn@sha256:19c3e7e31e66ce05bba800ec53e742099afcac6791529e60888f0698672dbf21

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:fdebfe99bac61e284948d9e3b0801607d04522e6d13802bfe6c78bbcc10ded94  (2398 bytes)
  signature  sha256:a1f5cd0022e62e93fe0eeb4fd6c58bd9395e92538ced95f5b7836af7950bddd6  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:7f38382618ba8f852ee5439219729284a4db0a95932858c74d898abbedb34331  (36755 bytes)
  signature  sha256:816ac44a44374185f4b1f480493343de305f258df448b115204121a97d10cc11  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:2aa739e24910805fc6d43aab098124a659742e96b047ddeeaac57bf0b8ba4ffe  (227 bytes)
  signature  sha256:91b87c7382322537289e45d5340652536e4e7a65b33b2bbdd41772ed954be0c6  (vex.json.sigstore)