readme update

Author: GErP83

README.md

@@ -263,7 +263,7 @@ Runs a security scan of an OpenAPI specification using OWASP ZAP.
 
 * Executes inside Docker
 * Accepts an OpenAPI file or directory (default: `openapi`)
-* Relative `-f` paths are resolved from the script location
+* Relative `-f` paths are resolved from the git repository root (fallback: current working directory)
 * For file paths, supports `.yml`/`.yaml` extension fallback
 * Skips execution if no OpenAPI specification can be resolved
 
@@ -297,7 +297,7 @@ Validates an OpenAPI specification for schema correctness.
 
 * Runs the OpenAPI validator in Docker
 * Accepts an OpenAPI file or directory (default: `openapi`)
-* Relative `-f` paths are resolved from the script location
+* Relative `-f` paths are resolved from the git repository root (fallback: current working directory)
 * For file paths, supports `.yml`/`.yaml` extension fallback
 * Skips execution if no OpenAPI specification can be resolved
 
@@ -319,6 +319,11 @@ curl -s $(baseUrl)/check-openapi-validation.sh | bash
 curl -s $(baseUrl)/check-openapi-validation.sh | bash -s -- -f openapi/openapi.yaml
 ```
 
+```sh
+# Monorepo/nested project example (path relative to git root)
+curl -s $(baseUrl)/check-openapi-validation.sh | bash -s -- -f mail-examples/mail-example-openapi/openapi/openapi.yaml
+```
+
 ---
 
 ### check-swift-headers.sh
@@ -586,7 +591,7 @@ Serves OpenAPI documentation locally using Docker.
 #### Behavior
 
 * Accepts an OpenAPI file or directory (default: `openapi`)
-* Relative `-f` paths are resolved from the script location
+* Relative `-f` paths are resolved from the git repository root (fallback: current working directory)
 * If a file is provided, mounts its parent directory
 * For file paths, supports `.yml`/`.yaml` extension fallback
 * Runs Nginx in the foreground

tests/bats/openapi-scripts.bats

@@ -167,3 +167,25 @@ YAML
     docker_call="$(cat "$DOCKER_LOG")"
     [[ "$docker_call" == *"/openapi/openapi.yaml:/openapi.yaml"* ]]
 }
+
+@test "check-openapi-validation supports piped execution with -f path relative to git root" {
+    repo="$(make_temp_repo)"
+    copy_openapi_scripts_into_repo "$repo"
+    install_docker_stub "$repo"
+
+    mkdir -p "$repo/mail-examples/mail-example-openapi/openapi"
+    cat >"$repo/mail-examples/mail-example-openapi/openapi/openapi.yaml" <<'YAML'
+openapi: 3.0.0
+info:
+  title: Nested API
+  version: 1.0.0
+paths: {}
+YAML
+
+    export DOCKER_LOG="$repo/docker.log"
+    run bash -c "cd '$repo' && cat scripts/check-openapi-validation.sh | bash -s -- -f mail-examples/mail-example-openapi/openapi/openapi.yaml"
+
+    [ "$status" -eq 0 ]
+    docker_call="$(cat "$DOCKER_LOG")"
+    [[ "$docker_call" == *"/mail-examples/mail-example-openapi/openapi/openapi.yaml:/openapi.yaml"* ]]
+}