diff --git a/dagryn.toml b/dagryn.toml
index 3f04b7a..29a948e 100644
--- a/dagryn.toml
+++ b/dagryn.toml
@@ -77,6 +77,7 @@ timeout = "10m"
 
 
 [tasks.backend-vulnerability-scan]
+workdir = "backend"
 command = "govulncheck ./... -json > gosec-report.json"
 uses = ["setup-go", "golang-vul"]
 needs = ["backend-install", "backend-build"]