diff --git a/docs/usage/configuration-options.md b/docs/usage/configuration-options.md
index 2d48d244e520c07d7904dd388e9c174273c7c29a..a353d52dad591b4e7e76087b8abbc075c5b86d24 100644
--- a/docs/usage/configuration-options.md
+++ b/docs/usage/configuration-options.md
@@ -1114,6 +1114,8 @@ You can choose from:
 - `unresolved` list CVEs that have no fixes
 - `all` list all CVEs
 
+You will only get OSV-based vulnerability alerts for direct dependencies.
+
 This feature is independent of the `osvVulnerabilityAlerts` option.
 
 The source of these CVEs is [OSV.dev](https://osv.dev/).