Obtain the triggering build workflows from provenances for static analysis

[behnazh-w]

We need to implement a new feature to obtain the GitHub Actions workflow that has triggered a build/replease from the SLSA provenance (or build command from the Witness provenance) and use that in the build checks instead of analyzing all the Actions. This would let us to use the most accurate workflows in the static analysis and get more benefit from the provenances if they are available.