From 562e14f1099899eda106435603832f17ba3ee85a Mon Sep 17 00:00:00 2001
From: william brady <will@crofton.cloud>
Date: Tue, 24 Feb 2026 13:11:28 -0500
Subject: [PATCH] fix: run scanner from /app directory to prevent module
 resolution conflict

When scanning a repo that has its own src/main.py, the entrypoint's
`python -m src.main` resolves the scanned repo's module instead of the
scanner's because /github/workspace is the working directory. Changing
to /app before execution ensures the scanner's own src.main is used.
---
 entrypoint.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/entrypoint.sh b/entrypoint.sh
index eaf0598..f35df7a 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -137,7 +137,7 @@ fi
 log_info "Running Security Scan"
 
 EXIT_CODE=0
-python -m src.main $CLI_ARGS || EXIT_CODE=$?
+cd /app && python -m src.main $CLI_ARGS || EXIT_CODE=$?
 
 log_end_group