Attestations for
  ghcr.io/kapsl-sh/yarn@sha256:1dd618ce6be77f43b67cde39e084df3bb931a3c1eb4969bdf9d012dfa281ad66

Signed at seal time, arm64. Each document below was signed before
this seal existed: an unsigned one is refused rather than published.

Verify against the registry yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/yarn@sha256:1dd618ce6be77f43b67cde39e084df3bb931a3c1eb4969bdf9d012dfa281ad66

=== receipt.json ============================================
  predicate  https://slsa.dev/provenance/v1
  document   sha256:29214a30429143f15dab5f20dea5e810ea3ade68a9568350e8f8d945becd0041  (2398 bytes)
  signature  sha256:77e6e870e77631f7a6056ace540be3cf457e030f30ce2451bd943876b88ce841  (receipt.json.sigstore)

=== sbom.json ===============================================
  predicate  cyclonedx
  document   sha256:d5d876a3f932132dc917cc94f7b85f533d27575f37a521b184a3d7f38f4ec7a5  (36755 bytes)
  signature  sha256:bb3d209213d85dd2f8ea569bef5f7923f7bc88a6077f0d73c0052d162942b25b  (sbom.json.sigstore)

=== vex.json ================================================
  predicate  https://openvex.dev/ns/v0.2.0
  document   sha256:f2754bf5ee701c6a6b12ccad3d06f967dac0326a372f9b63aaf0ae4523421823  (227 bytes)
  signature  sha256:5ab1d4c63496c85e1a35f577ff6f3d3ea09cc24d23d8b312cc01449c8dfc89ec  (vex.json.sigstore)