Attestations for
  ghcr.io/boks-sh/patch@sha256:ee4c46d860d5ad14b2f84f61d0e9877b158cc272b693ddfeb1fd3455fb50c4df

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/patch@sha256:ee4c46d860d5ad14b2f84f61d0e9877b158cc272b693ddfeb1fd3455fb50c4df

=== cyclonedx ===================================================
  (no attestation matches the document published now -- 1 older one(s) are attached)

=== slsaprovenance ==============================================
  (no attestation matches the document published now -- 1 older one(s) are attached)