Known importers: 4 (displaying 5 packages, including internal and invalid packages) github.com/accuknox/spire/pkg/agent/plugin/workloadattestor/k8s/sigstore github.com/asraa/slsa-on-github/provenance-verifier/pkg github.com/gossts/slsa-provenance/pkg github.com/slsa-framework/slsa-verifier/verifiers/internal/gha github.com/zj1244/syft/cmd/syft/cli/attest