conforming license types to spdx format

Author: courtneycl

content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review.md

@@ -94,11 +94,11 @@ jobs:
           # You can only can only include one of these two options: `allow_licenses` and `deny-licences`
           # ([String]). Only allow these licenses (optional)
           # Possible values: Any `spdx_id` value(s) from https://docs.github.com/en/rest/licenses 
-          # allow_licenses: GPL 3.0, BSD 3 Clause, MIT
+          # allow_licenses: GPL-3.0, BSD-3-Clause, MIT
 
           # ([String]). Block the pull request on these licenses (optional)
           # Possible values: Any  `spdx_id` value(s) from https://docs.github.com/en/rest/licenses 
-          # deny_licenses: LGPL 2.0, BSD 2 Clause
+          # deny_licenses: LGPL-2.0, BSD-2-Clause
 ```
 
 For further details about the configuration options, see [`dependency-review-action`](https://github.com/actions/dependency-review-action#readme).