Attestations for
  ghcr.io/boks-sh/claude-code@sha256:d6c84f23e121afc6f4b6ed5d67b9a36b03c920da8ab82ef2666faebd7f296a17

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/claude-code@sha256:d6c84f23e121afc6f4b6ed5d67b9a36b03c920da8ab82ef2666faebd7f296a17

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/claude-code
  digest    sha256:d6c84f23e121afc6f4b6ed5d67b9a36b03c920da8ab82ef2666faebd7f296a17
  states    2 component(s) are inside this image
      claude-code            2.1.245                  pkg:npm/@anthropic-ai/claude-code@2.1.245
      bun                    1.4.0                    pkg:npm/bun@1.4.0

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/claude-code
  digest    sha256:d6c84f23e121afc6f4b6ed5d67b9a36b03c920da8ab82ef2666faebd7f296a17
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      17 resolved input(s)
      release-asset-x86_64 https://github.com/anthropics/claude-code/releases/download/v2.1
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      composed-image     compose:bash
      composed-image     compose:coreutils
      composed-image     compose:curl
      composed-image     compose:diffutils
      composed-image     compose:findutils
      composed-image     compose:gawk
      composed-image     compose:git
      composed-image     compose:grep
      composed-image     compose:gzip
      composed-image     compose:jq
      ... and 5 more
  sbom      sbom.json sha256:ec724d9c50bf8ad4a911a412e521fcab...