Attestations for
  ghcr.io/boks-sh/python@sha256:70d3b646d9dcde7f0e56eb533ae129f71ebce95b7ad7311458178a4d348c8b57

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/python@sha256:70d3b646d9dcde7f0e56eb533ae129f71ebce95b7ad7311458178a4d348c8b57

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/python
  digest    sha256:70d3b646d9dcde7f0e56eb533ae129f71ebce95b7ad7311458178a4d348c8b57
  states    15 component(s) are inside this image
      bzip2                  1.0.8-6build2            pkg:deb/ubuntu/bzip2@1.0.8-6build2?distro=ubuntu-26.
      gdbm                   1.26-1build1             pkg:deb/ubuntu/gdbm@1.26-1build1?distro=ubuntu-26.04
      libffi                 3.5.2-4                  pkg:deb/ubuntu/libffi@3.5.2-4?distro=ubuntu-26.04
      libzstd                1.5.7+dfsg-3             pkg:deb/ubuntu/libzstd@1.5.7%2Bdfsg-3?distro=ubuntu-
      mpdecimal              4.0.1-6                  pkg:deb/ubuntu/mpdecimal@4.0.1-6?distro=ubuntu-26.04
      ncurses                6.6+20251231-1           pkg:deb/ubuntu/ncurses@6.6%2B20251231-1?distro=ubunt
      openssl                3.5.5-1ubuntu3.3         pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.3?distro=ubunt
      python                 3.13.15                  pkg:generic/python@3.13.15
      readline               8.3-4                    pkg:deb/ubuntu/readline@8.3-4?distro=ubuntu-26.04
      sqlite3                3.46.1-9ubuntu0.2        pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.2?distro=ubun
      util-linux             2.41.3-3ubuntu2          pkg:deb/ubuntu/util-linux@2.41.3-3ubuntu2?distro=ubu
      xz-utils               5.8.3-1                  pkg:deb/ubuntu/xz-utils@5.8.3-1?distro=ubuntu-26.04
      ... and 3 more

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/python
  digest    sha256:70d3b646d9dcde7f0e56eb533ae129f71ebce95b7ad7311458178a4d348c8b57
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      45 resolved input(s)
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      apt-package        pkg:deb/ubuntu/binutils
      apt-package        pkg:deb/ubuntu/ca-certificates
      apt-package        pkg:deb/ubuntu/curl
      apt-package        pkg:deb/ubuntu/file
      apt-package        pkg:deb/ubuntu/findutils
      apt-package        pkg:deb/ubuntu/g++
      apt-package        pkg:deb/ubuntu/gcc
      apt-package        pkg:deb/ubuntu/libbluetooth-dev
      apt-package        pkg:deb/ubuntu/libbz2-1.0
      apt-package        pkg:deb/ubuntu/libbz2-dev
      apt-package        pkg:deb/ubuntu/libdb-dev
      ... and 33 more
  sbom      sbom.json sha256:afbd4378a2aa0ab2f95240457745b47b...