dependency scanning - The GitHub Blog