doc: add info

JCPedroza · JCPedroza · commit 9de566f99c02 · 2025-03-01T21:27:50.000-06:00
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -1,6 +1,9 @@
 # Dependency Review Action
 #
-# This Action will scan dependency manifest files that change as part of a Pull Reqest, surfacing known-vulnerable versions of the packages declared or updated in the PR. Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable packages will be blocked from merging.
+# This Action will scan dependency manifest files that change as part of a Pull
+# Reqest, surfacing known-vulnerable versions of the packages declared or
+# updated in the PR. Once installed, if the workflow run is marked as required,
+# PRs introducing known-vulnerable packages will be blocked from merging.
 #
 # Source repository: https://github.com/actions/dependency-review-action
 # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,9 @@`
`1`	`1`	`# Dependency Review Action`
`2`	`2`	`#`
`3`		`-# This Action will scan dependency manifest files that change as part of a Pull Reqest, surfacing known-vulnerable versions of the packages declared or updated in the PR. Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable packages will be blocked from merging.`
	`3`	`+# This Action will scan dependency manifest files that change as part of a Pull`
	`4`	`+# Reqest, surfacing known-vulnerable versions of the packages declared or`
	`5`	`+# updated in the PR. Once installed, if the workflow run is marked as required,`
	`6`	`+# PRs introducing known-vulnerable packages will be blocked from merging.`
`4`	`7`	`#`
`5`	`8`	`# Source repository: https://github.com/actions/dependency-review-action`
`6`	`9`	`# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement`