Attestations for
  ghcr.io/boks-sh/ruby@sha256:3544869db3bf759d5376668d7e137907eb7cdd784a2bbd97174cdf62629238c3

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/ruby@sha256:3544869db3bf759d5376668d7e137907eb7cdd784a2bbd97174cdf62629238c3

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/ruby
  digest    sha256:3544869db3bf759d5376668d7e137907eb7cdd784a2bbd97174cdf62629238c3
  states    93 component(s) are inside this image
      abbrev                 0.1.2                    pkg:gem/abbrev@0.1.2
      base64                 0.2.0                    pkg:gem/base64@0.2.0
      benchmark              0.3.0                    pkg:gem/benchmark@0.3.0
      bigdecimal             3.1.5                    pkg:gem/bigdecimal@3.1.5
      bundler                2.5.22                   pkg:gem/bundler@2.5.22
      cgi                    0.4.2                    pkg:gem/cgi@0.4.2
      csv                    3.2.8                    pkg:gem/csv@3.2.8
      date                   3.3.4                    pkg:gem/date@3.3.4
      debug                  1.9.2                    pkg:gem/debug@1.9.2
      delegate               0.3.1                    pkg:gem/delegate@0.3.1
      did_you_mean           1.6.3                    pkg:gem/did_you_mean@1.6.3
      digest                 3.1.1                    pkg:gem/digest@3.1.1
      ... and 81 more

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/ruby
  digest    sha256:3544869db3bf759d5376668d7e137907eb7cdd784a2bbd97174cdf62629238c3
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      24 resolved input(s)
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      apt-package        pkg:deb/ubuntu/binutils
      apt-package        pkg:deb/ubuntu/ca-certificates
      apt-package        pkg:deb/ubuntu/curl
      apt-package        pkg:deb/ubuntu/file
      apt-package        pkg:deb/ubuntu/findutils
      apt-package        pkg:deb/ubuntu/g++
      apt-package        pkg:deb/ubuntu/gcc
      apt-package        pkg:deb/ubuntu/libffi-dev
      apt-package        pkg:deb/ubuntu/libffi8
      apt-package        pkg:deb/ubuntu/libssl-dev
      apt-package        pkg:deb/ubuntu/libssl3t64
      ... and 12 more
  sbom      sbom.json sha256:01a34385a170a9b348f964e34629f972...