Attestations for
  ghcr.io/boks-sh/wget@sha256:d4378635cb203bd2eb388e53bff9d4cb4fbe9a5b544a9c675c8dfc9b1b8ec03a

Verify them yourself:
  cosign verify-attestation --key cosign.pub \
      --type <cyclonedx|slsaprovenance> ghcr.io/boks-sh/wget@sha256:d4378635cb203bd2eb388e53bff9d4cb4fbe9a5b544a9c675c8dfc9b1b8ec03a

=== cyclonedx ===================================================
  (no attestation matches the document published now -- 1 older one(s) are attached)

=== slsaprovenance ==============================================
  (no attestation matches the document published now -- 1 older one(s) are attached)