SCM Authencitiy check should accept repositories found in provenance #1128
Description
The SCM Authenticiy check only accepts repositories of Maven PURLs, meaning many authentic repositories are being rejected. This should be fixed so that the check passes when a repository is found from a related provenance file.