* Add basic dependency-check job * Include summary in alert * Link to NVD * Move the alert script to a separate file