docs(readme): add provenance

Author: thomasleplus

README.md

@@ -269,6 +269,15 @@ docker buildx imagetools inspect leplusorg/openid-connect-provider-debugger --fo
 
 Replace `linux/amd64` by the desired platform (`linux/amd64`, `linux/arm64` etc.).
 
+## Provenance
+
+To get the provenance for the latest image (in JSON format), use the
+following command:
+
+```bash
+docker buildx imagetools inspect leplusorg/openid-connect-provider-debugger --format '{{ json .Provenance }}'
+```
+
 ## Sigstore
 
 [Sigstore](https://docs.sigstore.dev) is trying to improve supply