Attestations for
  ghcr.io/boks-sh/grype@sha256:edd5036f1b8633447f08ddbf8624877004d8c11c49b4aef9d25b2fdc1c2c1fa5

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/grype@sha256:edd5036f1b8633447f08ddbf8624877004d8c11c49b4aef9d25b2fdc1c2c1fa5

=== cyclonedx ===================================================
  (no attestation matches the document published now -- 0 older one(s) are attached)

=== slsaprovenance ==============================================
  (no attestation matches the document published now -- 0 older one(s) are attached)