Attestations for
  ghcr.io/boks-sh/coreutils@sha256:8b53670664d8a167a59e89e514dbdc963b4aba1375d5b282ce69e64b8fe6e4ac

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/coreutils@sha256:8b53670664d8a167a59e89e514dbdc963b4aba1375d5b282ce69e64b8fe6e4ac

=== cyclonedx ===================================================
  (no attestation matches the document published now -- 1 older one(s) are attached)

=== slsaprovenance ==============================================
  (no attestation matches the document published now -- 1 older one(s) are attached)