Enter a path relative to this build's workspace: . for its root, services/shop for an application, or reports/inventory.cdx.json for Import/Existing SBOM. Do not paste a shell command, absolute path, ~/, or ../. Check out and build the application before this step. Symlinks escaping the workspace are refused. Linux scans the agent host; it does not scan a container or production server.