Attestations for ghcr.io/boks-sh/zola@sha256:9dabdda4c53a2e53a46dbb39f58ada0e1fd8767a7c3532e7663226329ca4d78b Verify them yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/boks-sh/zola@sha256:9dabdda4c53a2e53a46dbb39f58ada0e1fd8767a7c3532e7663226329ca4d78b === cyclonedx =================================================== subject ghcr.io/boks-sh/zola digest sha256:9dabdda4c53a2e53a46dbb39f58ada0e1fd8767a7c3532e7663226329ca4d78b states 644 component(s) are inside this image zola 0.23.3 pkg:cargo/zola@0.23.3 adler2 2.0.1 pkg:cargo/adler2@2.0.1 ahash 0.7.8 pkg:cargo/ahash@0.7.8 ahash 0.8.12 pkg:cargo/ahash@0.8.12 aho-corasick 1.1.5 pkg:cargo/aho-corasick@1.1.5 aligned 0.4.3 pkg:cargo/aligned@0.4.3 aligned-vec 0.6.4 pkg:cargo/aligned-vec@0.6.4 alloca 0.4.0 pkg:cargo/alloca@0.4.0 allocator-api2 0.2.21 pkg:cargo/allocator-api2@0.2.21 ammonia 4.1.4 pkg:cargo/ammonia@4.1.4 anes 0.1.6 pkg:cargo/anes@0.1.6 anstream 1.0.0 pkg:cargo/anstream@1.0.0 ... and 632 more === slsaprovenance ============================================== subject ghcr.io/boks-sh/zola digest sha256:9dabdda4c53a2e53a46dbb39f58ada0e1fd8767a7c3532e7663226329ca4d78b build https://index.boks.sh/buildtype/v1 builder https://index.boks.sh from 3 resolved input(s) base-image ghcr.io/boks-sh/boks-base-static-ubuntu:latest composed-image compose:cargo apt-package pkg:deb/ubuntu/libgcc-s1@16-20260322-1ubuntu1?arch=arm64 sbom sbom.cdx.json sha256:a941a0b9ce2be3f1253734daaad2257f...