Attestations for
  ghcr.io/boks-sh/codex@sha256:70960c88c641a8da16ab98d66ebfb6c4d7d011934bd5dfc877dd20f1d819a10e

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/codex@sha256:70960c88c641a8da16ab98d66ebfb6c4d7d011934bd5dfc877dd20f1d819a10e

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/codex
  digest    sha256:70960c88c641a8da16ab98d66ebfb6c4d7d011934bd5dfc877dd20f1d819a10e
  states    1358 component(s) are inside this image
      codex                  0.149.1                  pkg:npm/@openai/codex@0.149.1
      Inflector              0.11.4                   pkg:cargo/Inflector@0.11.4
      actix-codec            0.5.2                    pkg:cargo/actix-codec@0.5.2
      actix-http             3.11.2                   pkg:cargo/actix-http@3.11.2
      actix-router           0.5.3                    pkg:cargo/actix-router@0.5.3
      actix-rt               2.11.0                   pkg:cargo/actix-rt@2.11.0
      actix-server           2.6.0                    pkg:cargo/actix-server@2.6.0
      actix-service          2.0.3                    pkg:cargo/actix-service@2.0.3
      actix-utils            3.0.1                    pkg:cargo/actix-utils@3.0.1
      actix-web              4.12.1                   pkg:cargo/actix-web@4.12.1
      addr2line              0.25.1                   pkg:cargo/addr2line@0.25.1
      adler2                 2.0.1                    pkg:cargo/adler2@2.0.1
      ... and 1346 more

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/codex
  digest    sha256:70960c88c641a8da16ab98d66ebfb6c4d7d011934bd5dfc877dd20f1d819a10e
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      11 resolved input(s)
      release-asset-aarch64 https://github.com/openai/codex/releases/download/rust-v0.149.1/
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      composed-image     compose:bash
      composed-image     compose:coreutils
      composed-image     compose:diffutils
      composed-image     compose:env
      composed-image     compose:findutils
      composed-image     compose:git
      composed-image     compose:grep
      composed-image     compose:rg
      composed-image     compose:sed
  sbom      sbom.json sha256:842d5deba226a5d9096b5b6b0427ddd8...