data/reusables/dependency-review/about-dependency-review-action2.md

By default, the {% data variables.dependency-review.action_name %} check will fail if it discovers any vulnerable packages. A failed check blocks a pull request from being merged when the repository owner requires the dependency review check to pass. For more information, see AUTOTITLE.