Attestations for
  ghcr.io/boks-sh/claude-code@sha256:56d7bb950ce35bc39b256c12b3adbe7760b10c1afd8300054ea3798bc37f7bef

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/claude-code@sha256:56d7bb950ce35bc39b256c12b3adbe7760b10c1afd8300054ea3798bc37f7bef

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/claude-code
  digest    sha256:56d7bb950ce35bc39b256c12b3adbe7760b10c1afd8300054ea3798bc37f7bef
  states    2 component(s) are inside this image
      claude-code            2.1.245                  pkg:npm/@anthropic-ai/claude-code@2.1.245
      bun                    1.4.0                    pkg:npm/bun@1.4.0

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/claude-code
  digest    sha256:56d7bb950ce35bc39b256c12b3adbe7760b10c1afd8300054ea3798bc37f7bef
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      17 resolved input(s)
      release-asset-aarch64 https://github.com/anthropics/claude-code/releases/download/v2.1
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      composed-image     compose:bash
      composed-image     compose:coreutils
      composed-image     compose:curl
      composed-image     compose:diffutils
      composed-image     compose:findutils
      composed-image     compose:gawk
      composed-image     compose:git
      composed-image     compose:grep
      composed-image     compose:gzip
      composed-image     compose:jq
      ... and 5 more
  sbom      sbom.json sha256:8593ae0bcbfde05e7ca9eabdbb0a4f72...