def check_provenance(self, whitelisted_sources: list = None, digests_fetcher: DigestsFetcherBase = None) -> dict:
digests_fetcher = digests_fetcher or PythonDigestsFetcher(list(self.pipfile.meta.sources.values()))<EOL>findings, _ = self._index_scan(digests_fetcher)<EOL>findings.extend(self._check_sources(whitelisted_sources))<EOL>return findings<EOL>
Check provenance/origin of packages that are stated in the project.