diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml
index 5b197c2ff..487e81580 100644
--- a/.github/workflows/make.yaml
+++ b/.github/workflows/make.yaml
@@ -122,7 +122,7 @@ jobs:
         run: echo "${HOME}/.local/bin" >> "$GITHUB_PATH"
       - uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
         with:
-          path: ./
+          sbom: "sbom.json"
           fail-build: true
           severity-cutoff: critical
           output-format: table
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index fcbe44b25..941b752e4 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -97,7 +97,7 @@ jobs:
       - name: Run vulnerability scan
         uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
         with:
-          path: ./
+          sbom: "sbom.json"
           fail-build: true
           severity-cutoff: critical