diff --git a/README.md b/README.md
index 3c2b571..dbc385c 100644
--- a/README.md
+++ b/README.md
@@ -154,5 +154,6 @@ See [here](https://docs.github.com/en/code-security/supply-chain-security/unders
 <summary>Sources</summary>
 
 - https://www.cisa.gov/
+- https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review
 
 </details>