docs(readme): add provenance

Author: thomasleplus

README.md

@@ -143,6 +143,15 @@ docker buildx imagetools inspect leplusorg/tor --format '{{ json (index .SBOM "l
 
 Replace `linux/amd64` by the desired platform (`linux/amd64`, `linux/arm64` etc.).
 
+## Provenance
+
+To get the provenance for the latest image (in JSON format), use the
+following command:
+
+```bash
+docker buildx imagetools inspect leplusorg/tor --format '{{ json .Provenance }}'
+```
+
 ## Sigstore
 
 [Sigstore](https://docs.sigstore.dev) is trying to improve supply