diff --git a/scripts/security/tests/test_gitea_authenticated_inventory_payload_validator.py b/scripts/security/tests/test_gitea_authenticated_inventory_payload_validator.py
index 92a95db2..a845d876 100644
--- a/scripts/security/tests/test_gitea_authenticated_inventory_payload_validator.py
+++ b/scripts/security/tests/test_gitea_authenticated_inventory_payload_validator.py
@@ -14,7 +14,13 @@ def run_validator(path: Path | None = None) -> dict:
     command = [sys.executable, str(SCRIPT)]
     if path:
         command.extend(["--input", str(path)])
-    result = subprocess.run(command, text=True, capture_output=True, check=True)
+    result = subprocess.run(
+        command,
+        cwd=ROOT / "apps/api",
+        text=True,
+        capture_output=True,
+        check=True,
+    )
     return json.loads(result.stdout)