Attestations for ghcr.io/boks-sh/omp@sha256:d4855e258590219c08fc7c2c9b19a07ad5475a15e64575b81cbb468642e72935 Verify them yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/boks-sh/omp@sha256:d4855e258590219c08fc7c2c9b19a07ad5475a15e64575b81cbb468642e72935 === cyclonedx =================================================== subject ghcr.io/boks-sh/omp digest sha256:d4855e258590219c08fc7c2c9b19a07ad5475a15e64575b81cbb468642e72935 states 555 component(s) are inside this image omp 18.0.4 pkg:npm/@oh-my-pi/pi-coding-agent@18.0.4 @anush008/tokenizers 0.0.0 pkg:npm/@anush008/tokenizers@0.0.0 @anush008/tokenizers-darwin-universal 0.0.0 pkg:npm/@anush008/tokenizers-darwin-universal@0.0.0 @anush008/tokenizers-linux-x64-gnu 0.0.0 pkg:npm/@anush008/tokenizers-linux-x64-gnu@0.0.0 @anush008/tokenizers-win32-x64-msvc 0.0.0 pkg:npm/@anush008/tokenizers-win32-x64-msvc@0.0.0 @ark/attest 0.56.3 pkg:npm/@ark/attest@0.56.3 @ark/fs 0.56.2 pkg:npm/@ark/fs@0.56.2 @ark/schema 0.56.2 pkg:npm/@ark/schema@0.56.2 @ark/util 0.56.2 pkg:npm/@ark/util@0.56.2 @babel/code-frame 7.29.7 pkg:npm/@babel/code-frame@7.29.7 @babel/compat-data 7.29.7 pkg:npm/@babel/compat-data@7.29.7 @babel/core 7.29.7 pkg:npm/@babel/core@7.29.7 ... and 543 more === slsaprovenance ============================================== subject ghcr.io/boks-sh/omp digest sha256:d4855e258590219c08fc7c2c9b19a07ad5475a15e64575b81cbb468642e72935 build https://index.boks.sh/buildtype/v1 builder https://index.boks.sh from 7 resolved input(s) release-asset-x86_64 https://github.com/can1357/oh-my-pi/releases/download/v18.0.4/om base-image ghcr.io/boks-sh/boks-base-static-ubuntu:latest composed-image compose:bash composed-image compose:findutils composed-image compose:gawk composed-image compose:git composed-image compose:grep sbom sbom.json sha256:1284340fa5233a005f24ec9dbd09be4e...