Attestations for
  ghcr.io/boks-sh/gcc@sha256:d0f5bb189611e4ecdd4e367f3d54aa49ba9276391ad8c25ba8e76f5f9b03695f

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/gcc@sha256:d0f5bb189611e4ecdd4e367f3d54aa49ba9276391ad8c25ba8e76f5f9b03695f

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/gcc
  digest    sha256:d0f5bb189611e4ecdd4e367f3d54aa49ba9276391ad8c25ba8e76f5f9b03695f
  states    10 component(s) are inside this image
      gcc-15                 15.2.0-16ubuntu1         pkg:deb/ubuntu/gcc-15@15.2.0-16ubuntu1?distro=ubuntu
      gmp                    2:6.3.0+dfsg-5ubuntu2    pkg:deb/ubuntu/gmp@2%3A6.3.0%2Bdfsg-5ubuntu2?distro=
      isl                    0.27-1build1             pkg:deb/ubuntu/isl@0.27-1build1?distro=ubuntu-26.04
      libzstd                1.5.7+dfsg-3             pkg:deb/ubuntu/libzstd@1.5.7%2Bdfsg-3?distro=ubuntu-
      mpclib3                1.3.1-3                  pkg:deb/ubuntu/mpclib3@1.3.1-3?distro=ubuntu-26.04
      mpfr4                  4.2.2-3                  pkg:deb/ubuntu/mpfr4@4.2.2-3?distro=ubuntu-26.04
      zlib                   1:1.3.dfsg+really1.3.1-1ubuntu3 pkg:deb/ubuntu/zlib@1%3A1.3.dfsg%2Breally1.3.1-1ubun
      gcc                    15.2.0-16ubuntu1         pkg:deb/ubuntu/gcc@15.2.0-16ubuntu1?distro=ubuntu-26
      gcc-defaults           4:15.2.0-5ubuntu1        pkg:deb/ubuntu/gcc-defaults@4:15.2.0-5ubuntu1?distro
      glibc                  2.43-2ubuntu2.3          pkg:deb/ubuntu/glibc@2.43-2ubuntu2.3?distro=ubuntu-2

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/gcc
  digest    sha256:d0f5bb189611e4ecdd4e367f3d54aa49ba9276391ad8c25ba8e76f5f9b03695f
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      2 resolved input(s)
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      apt-package        pkg:deb/ubuntu/gcc@4:15.2.0-5ubuntu1?arch=amd64
  sbom      sbom.json sha256:0d8359519be16f5252ba49d26976e652...