diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b274e8a..0db4327 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,7 +32,7 @@ jobs:
         uses: aquasecurity/trivy-action@master
         with:
           scan-type: 'rootfs'
-          scan-ref: '/github/workspace/ballerina/lib'
+          scan-ref: "${{ github.workspace }}/ballerina/lib"
           format: 'table'
           timeout: '10m0s'
           exit-code: '1'