Attestations for
  ghcr.io/boks-sh/patch@sha256:47b5579e5ec230c973e6cda720978f121211ff47af1aa83d6c35870ccf0af6e7

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/patch@sha256:47b5579e5ec230c973e6cda720978f121211ff47af1aa83d6c35870ccf0af6e7

=== cyclonedx ===================================================
  (no attestation matches the document published now -- 1 older one(s) are attached)

=== slsaprovenance ==============================================
  (no attestation matches the document published now -- 1 older one(s) are attached)