Merge pull request #1 from vouch-opensource/feature/add-working-direc…

…tory

add optional option to specify working directory

README.md

@@ -26,7 +26,7 @@ jobs:
           java-version: '8'
 
       - name: NVD Scan
-        uses: vouch-opensource/clojure-nvd-scan@v0.1
+        uses: vouch-opensource/clojure-nvd-scan@v0.2
         with:
           config-filename: '.nvd/config.json'
           aliases: 'dev:main'
@@ -37,3 +37,18 @@ jobs:
 ### Configuration
 
 Refer to [nvd-clojure configuration options](https://github.com/rm-hull/nvd-clojure#configuration-options). This github action uses the json configuration format.
+
+### Working directory
+
+In case you want to run the NVD scan in a different directory than the default GITHUB_WORKSPACE, you can specify the
+`working-directory` option
+
+```yml
+      - name: NVD Scan
+        uses: vouch-opensource/[email protected]
+        with:
+          working-directory: './cljs'
+          config-filename: '../.nvd/config.json'
+```
+
+Note that in case you also want to specify a config file, you have to provide a relative path from the working-directory.

action.yml

@@ -1,6 +1,9 @@
 name: 'Clojure NVD Scan'
 description: 'Scans a Clojure deps.edn project for vulnerabilities'
 inputs:
+  working-directory:
+    description: 'Directory in which to execute the NVD scan'
+    required: false
   config-filename:
     description: 'Config file path'
     required: false
@@ -51,4 +54,5 @@ runs:
 
     - name: NVD Scan
       run: clojure -Sdeps '{:deps {nvd-clojure/nvd-clojure {:mvn/version "${{ inputs.nvd-clojure-version }}"}}}' -M -m nvd.task.check ${{ inputs.config-filename }} "$(clojure -A:${{ inputs.aliases }} -Spath)"
+      working-directory: ${{ inputs.working-directory }}
       shell: bash