A 'hello world' container signing, supply chain security, SBOM and provenance workflow - View it on GitHub