There is no option to specify a path to scan.

[MatthewRobertson43997]

We have a repository that contains multiple microservices but they do not need to scan at the same time.

Currently there is no way to specify what path the scan should be limited to. The Azure DevOp HCL Appscan task does allow this.

[mattmurp]

Thanks for the feedback. This is something we'll look to add to the GitHub Action. The only way to control this today is to use a configuration file and store it at the root of the repository. The file needs to be named appscan-config.xml and can be as simple as the following (see full documentation here):

<Configuration>
    <Targets>
        <Target path="<some relative path>"/>
    </Targets>
</Configuration>