Attestations for
  ghcr.io/boks-sh/opencode@sha256:6f5ab32bab1dda702d563a5816dacdab86f66abbd788c4bb24457c7fe8805dc6

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/opencode@sha256:6f5ab32bab1dda702d563a5816dacdab86f66abbd788c4bb24457c7fe8805dc6

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/opencode
  digest    sha256:6f5ab32bab1dda702d563a5816dacdab86f66abbd788c4bb24457c7fe8805dc6
  states    847 component(s) are inside this image
      opencode               1.18.23                  pkg:npm/opencode-ai@1.18.23
      @actions/core          1.11.1                   pkg:npm/@actions/core@1.11.1
      @actions/exec          1.1.1                    pkg:npm/@actions/exec@1.1.1
      @actions/github        6.0.1                    pkg:npm/@actions/github@6.0.1
      @actions/http-client   2.2.3                    pkg:npm/@actions/http-client@2.2.3
      @actions/io            1.1.3                    pkg:npm/@actions/io@1.1.3
      @agentclientprotocol/sdk 0.21.0                   pkg:npm/@agentclientprotocol/sdk@0.21.0
      @ai-sdk/alibaba        1.0.17                   pkg:npm/@ai-sdk/alibaba@1.0.17
      @ai-sdk/amazon-bedrock 4.0.153                  pkg:npm/@ai-sdk/amazon-bedrock@4.0.153
      @ai-sdk/amazon-bedrock 4.0.158                  pkg:npm/@ai-sdk/amazon-bedrock@4.0.158
      @ai-sdk/anthropic      3.0.110                  pkg:npm/@ai-sdk/anthropic@3.0.110
      @ai-sdk/anthropic      3.0.111                  pkg:npm/@ai-sdk/anthropic@3.0.111
      ... and 835 more

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/opencode
  digest    sha256:6f5ab32bab1dda702d563a5816dacdab86f66abbd788c4bb24457c7fe8805dc6
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      12 resolved input(s)
      release-asset-x86_64 https://github.com/anomalyco/opencode/releases/download/v1.18.23
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      composed-image     compose:bash
      composed-image     compose:coreutils
      composed-image     compose:diffutils
      composed-image     compose:env
      composed-image     compose:findutils
      composed-image     compose:gawk
      composed-image     compose:git
      composed-image     compose:grep
      composed-image     compose:rg
      composed-image     compose:sed
  sbom      sbom.json sha256:ee1ed251cec8e5d03bc327396937b338...