See https://docs.gitlab.com/ee/user/application_security/dependency_scanning/index.html#configuration.