Fix GHSA-xffm-g5w8-qvg7 (#155) #30

Job	Run time
Build and publish image	2m 30s
generate provenance for container / detect-env	4s
generate provenance for container / generator	22s
generate provenance for container / final	4s
	3m 0s

Provide feedback