Attestations for ghcr.io/boks-sh/uv@sha256:95a9677c1d922f884cfe7ffd60c208a3c9c0cdea4a461e7e9ab17f78f517c219 Verify them yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/boks-sh/uv@sha256:95a9677c1d922f884cfe7ffd60c208a3c9c0cdea4a461e7e9ab17f78f517c219 === cyclonedx =================================================== (no attestation matches the document published now -- 1 older one(s) are attached) === slsaprovenance ============================================== (no attestation matches the document published now -- 1 older one(s) are attached)