Attestations for
  ghcr.io/boks-sh/cargo@sha256:e31c7272b7c4fec88d151c29e2727fdfb7678a3c13655ce9a761ff2fa35c8a06

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/cargo@sha256:e31c7272b7c4fec88d151c29e2727fdfb7678a3c13655ce9a761ff2fa35c8a06

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/cargo
  digest    sha256:e31c7272b7c4fec88d151c29e2727fdfb7678a3c13655ce9a761ff2fa35c8a06
  states    1144 component(s) are inside this image
      zlib                   1:1.3.dfsg+really1.3.1-1ubuntu3 pkg:deb/ubuntu/zlib@1%3A1.3.dfsg%2Breally1.3.1-1ubun
      cargo                  1.97.1                   cpe:2.3:a:rust-lang:rust:1.97.1:*:*:*:*:*:*:*
      addr2line              0.24.2                   pkg:cargo/addr2line@0.24.2
      addr2line              0.25.1                   pkg:cargo/addr2line@0.25.1
      adler2                 2.0.1                    pkg:cargo/adler2@2.0.1
      aes                    0.9.0                    pkg:cargo/aes@0.9.0
      aho-corasick           1.1.3                    pkg:cargo/aho-corasick@1.1.3
      aho-corasick           1.1.4                    pkg:cargo/aho-corasick@1.1.4
      alloc                  0.0.0                    pkg:cargo/alloc@0.0.0
      alloca                 0.4.0                    pkg:cargo/alloca@0.4.0
      allocator-api2         0.2.21                   pkg:cargo/allocator-api2@0.2.21
      alloctests             0.0.0                    pkg:cargo/alloctests@0.0.0
      ... and 1132 more

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/cargo
  digest    sha256:e31c7272b7c4fec88d151c29e2727fdfb7678a3c13655ce9a761ff2fa35c8a06
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      8 resolved input(s)
      component-cargo    https://static.rust-lang.org/dist/2026-07-16/cargo-1.97.1-aarch6
      component-rust-std https://static.rust-lang.org/dist/2026-07-16/rust-std-1.97.1-aar
      component-rustc    https://static.rust-lang.org/dist/2026-07-16/rustc-1.97.1-aarch6
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      composed-image     compose:binutils
      composed-image     compose:cc
      apt-package        pkg:deb/ubuntu/libgcc-s1@16-20260322-1ubuntu1?arch=arm64
      apt-package        pkg:deb/ubuntu/zlib1g@1:1.3.dfsg+really1.3.1-1ubuntu3?arch=arm64
  sbom      sbom.cdx.json sha256:73fa82af8556ad896acec9c6a390f3e2...