diff --git a/.github/workflows/cve-scanning.yml b/.github/workflows/cve-scanning.yml
index c4a64b5c..55b3a573 100644
--- a/.github/workflows/cve-scanning.yml
+++ b/.github/workflows/cve-scanning.yml
@@ -36,6 +36,7 @@ jobs:
         with:
           project: 'spring-bot'
           format: 'HTML'
+          path: '.'
           out: 'reports' # this is the default, no need to specify unless you wish to override it
           args: >
             --suppression ./.github/workflows/allow-list.xml