[
  {
    "critical": {
      "identity": {
        "docker-reference": "ghcr.io/pingcap-inc/nexuscrm-api-host-gateway"
      },
      "image": {
        "docker-manifest-digest": "sha256:73aaf090f3d85aa34ee199857f03fa3a95c8ede2ffd4cc2cdb5b94e566b11662"
      },
      "type": "cosign container image signature"
    },
    "optional": {
      "io.nexuscrm.github-oidc-token": "header.payload.signature",
      "io.nexuscrm.signer.key-arn": "arn:aws:kms:us-west-2:604175033442:key/5d8648a4-770c-4383-8f7a-9f0780522293",
      "io.nexuscrm.signer.policy-sha256": "sha256:64388365f7a48810d39901f22f8b6100019f8e35f05b982a5c6d1d3c6182411a",
      "io.nexuscrm.signer.workflow": "pingcap-inc/nexuscrm-api-host/.github/workflows/publish-gateway-image.yml@refs/heads/main",
      "io.nexuscrm.source.commit": "0123456789abcdef0123456789abcdef01234567",
      "io.nexuscrm.source.ref": "refs/heads/main",
      "io.nexuscrm.source.repository": "pingcap-inc/nexuscrm-api-host"
    }
  }
]