A composite action ships scripts/check.sh in its own repository. A consumer invokes the action after checking out an unrelated application repository. Which base path should the action use to locate its bundled script?

1. Use github.workspace/.github/actions/check even when the action comes from a separate repository.
2. Always resolve scripts/check.sh relative to the caller GITHUB_WORKSPACE.
3. Use runner.temp because every downloaded action is guaranteed to be installed there.
4. Use the composite action own github.action_path directory.