Attestations for
  ghcr.io/boks-sh/ruby@sha256:245496442f88d8cd9c5f43642f513d845fe9b0832769b5b6824df6c72ba6da00

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/ruby@sha256:245496442f88d8cd9c5f43642f513d845fe9b0832769b5b6824df6c72ba6da00

=== cyclonedx ===================================================
  subject   ghcr.io/boks-sh/ruby
  digest    sha256:245496442f88d8cd9c5f43642f513d845fe9b0832769b5b6824df6c72ba6da00
  states    95 component(s) are inside this image
      abbrev                 0.1.2                    pkg:gem/abbrev@0.1.2
      base64                 0.2.0                    pkg:gem/base64@0.2.0
      benchmark              0.4.0                    pkg:gem/benchmark@0.4.0
      bigdecimal             3.1.8                    pkg:gem/bigdecimal@3.1.8
      bundler                2.6.9                    pkg:gem/bundler@2.6.9
      cgi                    0.4.2                    pkg:gem/cgi@0.4.2
      csv                    3.3.2                    pkg:gem/csv@3.3.2
      date                   3.4.1                    pkg:gem/date@3.4.1
      debug                  1.11.0                   pkg:gem/debug@1.11.0
      delegate               0.4.0                    pkg:gem/delegate@0.4.0
      did_you_mean           2.0.0                    pkg:gem/did_you_mean@2.0.0
      digest                 3.2.0                    pkg:gem/digest@3.2.0
      ... and 83 more

=== slsaprovenance ==============================================
  subject   ghcr.io/boks-sh/ruby
  digest    sha256:245496442f88d8cd9c5f43642f513d845fe9b0832769b5b6824df6c72ba6da00
  build     https://index.boks.sh/buildtype/v1
  builder   https://index.boks.sh
  from      24 resolved input(s)
      base-image         ghcr.io/boks-sh/boks-base-static-ubuntu:latest
      apt-package        pkg:deb/ubuntu/binutils
      apt-package        pkg:deb/ubuntu/ca-certificates
      apt-package        pkg:deb/ubuntu/curl
      apt-package        pkg:deb/ubuntu/file
      apt-package        pkg:deb/ubuntu/findutils
      apt-package        pkg:deb/ubuntu/g++
      apt-package        pkg:deb/ubuntu/gcc
      apt-package        pkg:deb/ubuntu/libffi-dev
      apt-package        pkg:deb/ubuntu/libffi8
      apt-package        pkg:deb/ubuntu/libssl-dev
      apt-package        pkg:deb/ubuntu/libssl3t64
      ... and 12 more
  sbom      sbom.json sha256:46b03420284c0bfd2e907410fa328b82...