It would be super useful to get the values of the attestations (provenance, SPDX) in a typed way. For the SBOM, types of the following structure would be useful: https://github.com/docker/index-cli-plugin/blob/main/types/types.go#L164-L179