clean up list formatting for PR comment

__tests__/summary.test.ts

@@ -131,9 +131,13 @@ test('returns minimal summary in case the core.summary is too large for a PR com
   expect(text).toContain('<h1>Dependency Review</h1>')
   expect(minSummary).toContain('# Dependency Review')
 
+  expect(text).toContain('❌ 3 vulnerable package(s)')
+  expect(text).not.toContain('* ❌ 3 vulnerable package(s)')
   expect(text).toContain('lodash')
   expect(text).toContain('colors')
   expect(text).toContain('@foo/bar')
+
+  expect(minSummary).toContain('* ❌ 3 vulnerable package(s)')
   expect(minSummary).not.toContain('lodash')
   expect(minSummary).not.toContain('colors')
   expect(minSummary).not.toContain('@foo/bar')

src/summary.ts

@@ -92,7 +92,9 @@ export function addSummaryToSummary(
   ];
 
   core.summary.addList(summaryList)
-  out.push(...summaryList)
+  summaryList.forEach( (line) => {
+    out.push('* ' + line)
+  })
 
   core.summary.addRaw('See the Details below.')
   out.push(`\n[View full job summary](${process.env.GITHUB_SERVER_URL}/${process.env.GITHUB_REPOSITORY}/actions/runs/${process.env.GITHUB_RUN_ID})`)