Attestations for ghcr.io/boks-sh/curl@sha256:63792da2dc3453193612899b220323f40b91778594edbfc5836e3298f596bf79 Verify them yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/boks-sh/curl@sha256:63792da2dc3453193612899b220323f40b91778594edbfc5836e3298f596bf79 === cyclonedx =================================================== (no attestation matches the document published now -- 1 older one(s) are attached) === slsaprovenance ============================================== (no attestation matches the document published now -- 1 older one(s) are attached)