diff --git a/.cspell.json b/.cspell.json
index 6f5b348..88003d5 100644
--- a/.cspell.json
+++ b/.cspell.json
@@ -204,7 +204,8 @@
     "idempotent",
     "interoperable",
     "composable",
-    "extensible"
+    "extensible",
+    "srcset"
   ],
   "ignoreWords": [
     "luongnv89",
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6571c02..cd712a9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -55,7 +55,7 @@ jobs:
           uv pip install "bandit[toml]"
 
       - name: Run Bandit Security Scan
-        run: uv run bandit -c pyproject.toml -r scripts/ --exclude scripts/tests/
+        run: uv run bandit -c scripts/pyproject.toml -r scripts/ --exclude scripts/tests/
 
   test:
     name: Unit Tests (Python ${{ matrix.python-version }})