Towards automated, provenance-driven security audit for git-based repositories: applied to germany's corona-warn-app: vision paper | Publicación