Attestations for ghcr.io/kapsl-sh/zola@sha256:ca2eea129c1bfd7e68d316128c722840de865ec5fd9d6cd779226fb3fe98d6a6 Verify them yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/zola@sha256:ca2eea129c1bfd7e68d316128c722840de865ec5fd9d6cd779226fb3fe98d6a6 === cyclonedx =================================================== subject ghcr.io/kapsl-sh/zola digest sha256:ca2eea129c1bfd7e68d316128c722840de865ec5fd9d6cd779226fb3fe98d6a6 states 644 component(s) are inside this image zola 0.23.4 pkg:cargo/zola@0.23.4 adler2 2.0.1 pkg:cargo/adler2@2.0.1 ahash 0.7.8 pkg:cargo/ahash@0.7.8 ahash 0.8.12 pkg:cargo/ahash@0.8.12 aho-corasick 1.1.5 pkg:cargo/aho-corasick@1.1.5 aligned 0.4.3 pkg:cargo/aligned@0.4.3 aligned-vec 0.6.4 pkg:cargo/aligned-vec@0.6.4 alloca 0.4.0 pkg:cargo/alloca@0.4.0 allocator-api2 0.2.21 pkg:cargo/allocator-api2@0.2.21 ammonia 4.1.4 pkg:cargo/ammonia@4.1.4 anes 0.1.6 pkg:cargo/anes@0.1.6 anstream 1.0.0 pkg:cargo/anstream@1.0.0 ... and 632 more === slsaprovenance ============================================== subject ghcr.io/kapsl-sh/zola digest sha256:ca2eea129c1bfd7e68d316128c722840de865ec5fd9d6cd779226fb3fe98d6a6 build https://index.kapsl.sh/buildtype/v1 builder https://index.kapsl.sh from 3 resolved input(s) base-image ghcr.io/kapsl-sh/kapsl-base-static:latest composed-image compose:cargo apt-package pkg:deb/ubuntu/libgcc-s1@16-20260322-1ubuntu1?arch=arm64 sbom sbom.json sha256:d117fa5d1c4d1840f410e7efd73088cb...