Merge pull request #4722 from metalbear-co/slsa-l2-provenance