diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index 4e9dc3f..040e2b4 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -20,7 +20,11 @@ jobs:
   scan-pr:
     if: (github.event_name == 'pull_request' && github.event.pull_request.draft == false) || github.event_name == 'merge_group'
     uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.3.2
+    with:
+      scan-args: '--config ./osv-scanner.toml -r ./'
 
   scan-scheduled:
     if: github.event_name == 'schedule' || github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.2
+    with:
+      scan-args: '--config ./osv-scanner.toml -r ./'