diff --git a/detections/cloud/github_dependabot_alert.yml b/detections/cloud/github_dependabot_alert.yml
index f30cfa4c01..7a2bdc59b3 100644
--- a/detections/cloud/github_dependabot_alert.yml
+++ b/detections/cloud/github_dependabot_alert.yml
@@ -6,12 +6,11 @@ author: Patrick Bareiss, Splunk
 type: Anomaly
 datamodel: []
 description: This search looks for Dependabot Alerts in Github logs.
-search: '`github` alert.id=* action=create 
-  | rename repository.full_name as repository, repository.html_url as repository_url
-  | stats min(_time) as firstTime max(_time) as lastTime by action alert.affected_package_name 
-  alert.affected_range alert.created_at alert.external_identifier alert.external_reference alert.fixed_in 
-  alert.severity repository repository_url
-  | `security_content_ctime(firstTime)` | `security_content_ctime(lastTime)`
+search: '`github` alert.id=* action=create | rename repository.full_name as repository,
+  repository.html_url as repository_url | stats min(_time) as firstTime max(_time)
+  as lastTime by action alert.affected_package_name alert.affected_range alert.created_at
+  alert.external_identifier alert.external_reference alert.fixed_in alert.severity
+  repository repository_url | `security_content_ctime(firstTime)` | `security_content_ctime(lastTime)`
   | `github_dependabot_alert_filter`'
 how_to_implement: You must index GitHub logs. You can follow the url in reference
   to onboard GitHub logs.