| 
						
						
							
								
							
						
						
					 | 
					 | 
					@ -287,22 +287,11 @@ $ docker buildx imagetools inspect moby/buildkit:master --format "{{json .Manife
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					Following command provides [SLSA](https://github.com/moby/buildkit/blob/master/docs/attestations/slsa-provenance.md) JSON output:
 | 
					 | 
					 | 
					 | 
					Following command provides [SLSA](https://github.com/moby/buildkit/blob/master/docs/attestations/slsa-provenance.md) JSON output:
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					
 | 
					 | 
					 | 
					 | 
					
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					```console
 | 
					 | 
					 | 
					 | 
					```console
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					$ docker buildx imagetools inspect crazymax/buildkit:attest --format "{{json .SLSA}}"
 | 
					 | 
					 | 
					 | 
					$ docker buildx imagetools inspect crazymax/buildkit:attest --format "{{json .Provenance}}"
 | 
				
			
			
				
				
			
		
	
		
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					```
 | 
					 | 
					 | 
					 | 
					```
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					```json
 | 
					 | 
					 | 
					 | 
					```json
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					{
 | 
					 | 
					 | 
					 | 
					{
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  "Provenance": {
 | 
					 | 
					 | 
					 | 
					  "SLSA": {
 | 
				
			
			
				
				
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "_type": "https://in-toto.io/Statement/v0.1",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "predicateType": "https://slsa.dev/provenance/v0.2",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "subject": [
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        "name": "pkg:docker/crazymax/buildkit@attest?platform=linux%2Famd64",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        "digest": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					          "sha256": "fbd10fe50b4b174bb9ea273e2eb9827fa8bf5c88edd8635a93dc83e0d1aecb55"
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    ],
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "predicate": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "builder": {
 | 
					 | 
					 | 
					 | 
					    "builder": {
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "id": ""
 | 
					 | 
					 | 
					 | 
					      "id": ""
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    },
 | 
					 | 
					 | 
					 | 
					    },
 | 
				
			
			
		
	
	
		
		
			
				
					| 
						
							
								
							
						
						
							
								
							
						
						
					 | 
					 | 
					@ -351,7 +340,6 @@ $ docker buildx imagetools inspect crazymax/buildkit:attest --format "{{json .SL
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "https://mobyproject.org/buildkit@v1#metadata": {}
 | 
					 | 
					 | 
					 | 
					      "https://mobyproject.org/buildkit@v1#metadata": {}
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    }
 | 
					 | 
					 | 
					 | 
					    }
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  }
 | 
					 | 
					 | 
					 | 
					  }
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					}
 | 
					 | 
					 | 
					 | 
					}
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					```
 | 
					 | 
					 | 
					 | 
					```
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					
 | 
					 | 
					 | 
					 | 
					
 | 
				
			
			
		
	
	
		
		
			
				
					| 
						
						
						
							
								
							
						
					 | 
					 | 
					@ -363,17 +351,6 @@ $ docker buildx imagetools inspect crazymax/buildkit:attest --format "{{json .SB
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					```json
 | 
					 | 
					 | 
					 | 
					```json
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					{
 | 
					 | 
					 | 
					 | 
					{
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  "SPDX": {
 | 
					 | 
					 | 
					 | 
					  "SPDX": {
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "_type": "https://in-toto.io/Statement/v0.1",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "predicateType": "https://spdx.dev/Document",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "subject": [
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        "name": "pkg:docker/crazymax/buildkit@attest?platform=linux%2Famd64",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        "digest": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					          "sha256": "fbd10fe50b4b174bb9ea273e2eb9827fa8bf5c88edd8635a93dc83e0d1aecb55"
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    ],
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "predicate": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "SPDXID": "SPDXRef-DOCUMENT",
 | 
					 | 
					 | 
					 | 
					    "SPDXID": "SPDXRef-DOCUMENT",
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "creationInfo": {
 | 
					 | 
					 | 
					 | 
					    "creationInfo": {
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "created": "2022-12-01T11:46:48.063400162Z",
 | 
					 | 
					 | 
					 | 
					      "created": "2022-12-01T11:46:48.063400162Z",
 | 
				
			
			
		
	
	
		
		
			
				
					| 
						
						
						
							
								
							
						
					 | 
					 | 
					@ -389,7 +366,6 @@ $ docker buildx imagetools inspect crazymax/buildkit:attest --format "{{json .SB
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "files": [...],
 | 
					 | 
					 | 
					 | 
					    "files": [...],
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "spdxVersion": "SPDX-2.2"
 | 
					 | 
					 | 
					 | 
					    "spdxVersion": "SPDX-2.2"
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  }
 | 
					 | 
					 | 
					 | 
					  }
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					}
 | 
					 | 
					 | 
					 | 
					}
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					```
 | 
					 | 
					 | 
					 | 
					```
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					
 | 
					 | 
					 | 
					 | 
					
 | 
				
			
			
		
	
	
		
		
			
				
					| 
						
							
								
							
						
						
							
								
							
						
						
					 | 
					 | 
					@ -465,19 +441,8 @@ $ docker buildx imagetools inspect crazymax/buildkit:attest --format "{{json .}}
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      }
 | 
					 | 
					 | 
					 | 
					      }
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    ]
 | 
					 | 
					 | 
					 | 
					    ]
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  },
 | 
					 | 
					 | 
					 | 
					  },
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  "SLSA": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  "Provenance": {
 | 
					 | 
					 | 
					 | 
					  "Provenance": {
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "_type": "https://in-toto.io/Statement/v0.1",
 | 
					 | 
					 | 
					 | 
					    "SLSA": {
 | 
				
			
			
				
				
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "predicateType": "https://slsa.dev/provenance/v0.2",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "subject": [
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					          "name": "pkg:docker/crazymax/buildkit@attest?platform=linux%2Famd64",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					          "digest": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					            "sha256": "fbd10fe50b4b174bb9ea273e2eb9827fa8bf5c88edd8635a93dc83e0d1aecb55"
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					          }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      ],
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "predicate": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "builder": {
 | 
					 | 
					 | 
					 | 
					      "builder": {
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        "id": ""
 | 
					 | 
					 | 
					 | 
					        "id": ""
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      },
 | 
					 | 
					 | 
					 | 
					      },
 | 
				
			
			
		
	
	
		
		
			
				
					| 
						
							
								
							
						
						
							
								
							
						
						
					 | 
					 | 
					@ -526,21 +491,9 @@ $ docker buildx imagetools inspect crazymax/buildkit:attest --format "{{json .}}
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        "https://mobyproject.org/buildkit@v1#metadata": {}
 | 
					 | 
					 | 
					 | 
					        "https://mobyproject.org/buildkit@v1#metadata": {}
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      }
 | 
					 | 
					 | 
					 | 
					      }
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    }
 | 
					 | 
					 | 
					 | 
					    }
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  },
 | 
					 | 
					 | 
					 | 
					  },
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  "SBOM": {
 | 
					 | 
					 | 
					 | 
					  "SBOM": {
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    "SPDX": {
 | 
					 | 
					 | 
					 | 
					    "SPDX": {
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "_type": "https://in-toto.io/Statement/v0.1",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "predicateType": "https://spdx.dev/Document",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "subject": [
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					          "name": "pkg:docker/crazymax/buildkit@attest?platform=linux%2Famd64",
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					          "digest": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					            "sha256": "fbd10fe50b4b174bb9ea273e2eb9827fa8bf5c88edd8635a93dc83e0d1aecb55"
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					          }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      ],
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "predicate": {
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "SPDXID": "SPDXRef-DOCUMENT",
 | 
					 | 
					 | 
					 | 
					      "SPDXID": "SPDXRef-DOCUMENT",
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "creationInfo": {
 | 
					 | 
					 | 
					 | 
					      "creationInfo": {
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					        "created": "2022-12-01T11:46:48.063400162Z",
 | 
					 | 
					 | 
					 | 
					        "created": "2022-12-01T11:46:48.063400162Z",
 | 
				
			
			
		
	
	
		
		
			
				
					| 
						
						
						
							
								
							
						
					 | 
					 | 
					@ -557,7 +510,6 @@ $ docker buildx imagetools inspect crazymax/buildkit:attest --format "{{json .}}
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					      "spdxVersion": "SPDX-2.2"
 | 
					 | 
					 | 
					 | 
					      "spdxVersion": "SPDX-2.2"
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					    }
 | 
					 | 
					 | 
					 | 
					    }
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  }
 | 
					 | 
					 | 
					 | 
					  }
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					  }
 | 
					 | 
					 | 
					 | 
					 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					}
 | 
					 | 
					 | 
					 | 
					}
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					```
 | 
					 | 
					 | 
					 | 
					```
 | 
				
			
			
		
	
		
		
			
				
					
					 | 
					 | 
					 | 
					
 | 
					 | 
					 | 
					 | 
					
 | 
				
			
			
		
	
	
		
		
			
				
					| 
						
							
								
							
						
						
						
					 | 
					 | 
					
 
 |