diff --git a/module/default.nix b/module/default.nix
index 86b3539..f3327c7 100644
--- a/module/default.nix
+++ b/module/default.nix
@@ -200,7 +200,7 @@ in
 
       checkRencSecsReport =
         pkgs.runCommandNoCCLocal "secret-check-report" { }
-          "${lib.getExe cfg.package} -p ${mkProfile cfg} check > $out";
+          "${lib.getExe cfg.package} -p ${mkProfile cfg} --flake-root ${self} check > $out";
     in
     mkIf sysusers (
       let