Attestations for
  ghcr.io/boks-sh/pytest@sha256:cbd728f475f912902b081e1b7d6e9889e419d228fbef0f7765612ab922ab3a39

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/pytest@sha256:cbd728f475f912902b081e1b7d6e9889e419d228fbef0f7765612ab922ab3a39

=== cyclonedx ===================================================
  (no attestation matches the document published now -- 1 older one(s) are attached)

=== slsaprovenance ==============================================
  (no attestation matches the document published now -- 1 older one(s) are attached)