Attestations for
  ghcr.io/kapsl-sh/zola@sha256:1ec418c691104a5839d170844aca636074e2ecc58e684fbc263d86ade7a5e640

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/kapsl-sh/zola@sha256:1ec418c691104a5839d170844aca636074e2ecc58e684fbc263d86ade7a5e640

=== cyclonedx ===================================================
  subject   ghcr.io/kapsl-sh/zola
  digest    sha256:1ec418c691104a5839d170844aca636074e2ecc58e684fbc263d86ade7a5e640
  states    644 component(s) are inside this image
      zola                   0.23.4                   pkg:cargo/zola@0.23.4
      adler2                 2.0.1                    pkg:cargo/adler2@2.0.1
      ahash                  0.7.8                    pkg:cargo/ahash@0.7.8
      ahash                  0.8.12                   pkg:cargo/ahash@0.8.12
      aho-corasick           1.1.5                    pkg:cargo/aho-corasick@1.1.5
      aligned                0.4.3                    pkg:cargo/aligned@0.4.3
      aligned-vec            0.6.4                    pkg:cargo/aligned-vec@0.6.4
      alloca                 0.4.0                    pkg:cargo/alloca@0.4.0
      allocator-api2         0.2.21                   pkg:cargo/allocator-api2@0.2.21
      ammonia                4.1.4                    pkg:cargo/ammonia@4.1.4
      anes                   0.1.6                    pkg:cargo/anes@0.1.6
      anstream               1.0.0                    pkg:cargo/anstream@1.0.0
      ... and 632 more

=== slsaprovenance ==============================================
  subject   ghcr.io/kapsl-sh/zola
  digest    sha256:1ec418c691104a5839d170844aca636074e2ecc58e684fbc263d86ade7a5e640
  build     https://index.kapsl.sh/buildtype/v1
  builder   https://index.kapsl.sh
  from      3 resolved input(s)
      base-image         ghcr.io/kapsl-sh/kapsl-base-static:latest
      composed-image     compose:cargo
      apt-package        pkg:deb/ubuntu/libgcc-s1@16-20260322-1ubuntu1?arch=amd64
  sbom      sbom.json sha256:c90b8f714ddc82b33d33de80216fe364...