add deny_list as paramter

action.yml

@@ -47,6 +47,9 @@ inputs:
   comment-summary-in-pr:
     description: A boolean to determine if the report should be posted as a comment in the PR itself. Setting this to true requires you to give the workflow the write permissions for pull-requests
     required: false
+  deny_list:
+    description: A comma-separated list of dependencies to deny (e.g. "pkg:npm/express, pkg:pip/pycrypto")
+    required: false
 runs:
   using: 'node16'
   main: 'dist/index.js'