Attestations for
  ghcr.io/boks-sh/python@sha256:9ccab69690b8c88682d76835b1d8fe616a2ebd964a5e97c446ee91992573d5fd

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/python@sha256:9ccab69690b8c88682d76835b1d8fe616a2ebd964a5e97c446ee91992573d5fd

=== cyclonedx ===================================================
  (no attestation matches the document published now -- 0 older one(s) are attached)

=== slsaprovenance ==============================================
  (no attestation matches the document published now -- 0 older one(s) are attached)