diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 5b3d638..b4b595a 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -33,7 +33,7 @@ jobs:
         uses: aquasecurity/trivy-action@master
         with:
           scan-type: 'rootfs'
-          scan-ref: '/github/workspace/ballerina/lib'
+          scan-ref: '${{ github.workspace.ballerina.lib }}/'
           format: 'table'
           timeout: '10m0s'
           exit-code: '1'