diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 438fe5d9..90415a98 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 # Estate guardrail: cancel superseded runs so re-pushes / rebased PR
 # updates do not pile up queued runs against the shared account-wide
diff --git a/ada-ecosystem/ada-loom-registry/.github/workflows/codeql.yml b/ada-ecosystem/ada-loom-registry/.github/workflows/codeql.yml
index 5148cf4c..3e1a7920 100644
--- a/ada-ecosystem/ada-loom-registry/.github/workflows/codeql.yml
+++ b/ada-ecosystem/ada-loom-registry/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/affinescript-ecosystem/rattlescript/affinescript/.github/workflows/codeql.yml b/affinescript-ecosystem/rattlescript/affinescript/.github/workflows/codeql.yml
index 6551e6c7..c72b1522 100644
--- a/affinescript-ecosystem/rattlescript/affinescript/.github/workflows/codeql.yml
+++ b/affinescript-ecosystem/rattlescript/affinescript/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/asdf-augmenters/asdf-control-tower/.github/workflows/codeql.yml b/asdf-augmenters/asdf-control-tower/.github/workflows/codeql.yml
index a2a0bd7b..4018ffe7 100644
--- a/asdf-augmenters/asdf-control-tower/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-control-tower/.github/workflows/codeql.yml
@@ -6,7 +6,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: "0 6 * * 1"
+    - cron: "0 6 1 * *"
 permissions: read-all
 jobs:
   analyze:
diff --git a/asdf-augmenters/asdf-plugin-collection/plugins/casket-ssg/.github/workflows/codeql.yml b/asdf-augmenters/asdf-plugin-collection/plugins/casket-ssg/.github/workflows/codeql.yml
index 35dd2051..e97d5c03 100644
--- a/asdf-augmenters/asdf-plugin-collection/plugins/casket-ssg/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-plugin-collection/plugins/casket-ssg/.github/workflows/codeql.yml
@@ -6,7 +6,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: "0 6 * * 1"
+    - cron: "0 6 1 * *"
 permissions: read-all
 jobs:
   analyze:
diff --git a/asdf-augmenters/asdf-plugin-collection/plugins/hashicorp/.github/workflows/codeql.yml b/asdf-augmenters/asdf-plugin-collection/plugins/hashicorp/.github/workflows/codeql.yml
index 35dd2051..e97d5c03 100644
--- a/asdf-augmenters/asdf-plugin-collection/plugins/hashicorp/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-plugin-collection/plugins/hashicorp/.github/workflows/codeql.yml
@@ -6,7 +6,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: "0 6 * * 1"
+    - cron: "0 6 1 * *"
 permissions: read-all
 jobs:
   analyze:
diff --git a/asdf-augmenters/asdf-plugin-collection/plugins/openlitespeed/.github/workflows/codeql.yml b/asdf-augmenters/asdf-plugin-collection/plugins/openlitespeed/.github/workflows/codeql.yml
index 61d95da9..e1493d17 100644
--- a/asdf-augmenters/asdf-plugin-collection/plugins/openlitespeed/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-plugin-collection/plugins/openlitespeed/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/asdf-augmenters/asdf-security-plugin/.github/workflows/codeql.yml b/asdf-augmenters/asdf-security-plugin/.github/workflows/codeql.yml
index 61d95da9..e1493d17 100644
--- a/asdf-augmenters/asdf-security-plugin/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-security-plugin/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/cadre-tea-router/.github/workflows/codeql.yml b/cadre-tea-router/.github/workflows/codeql.yml
index 5148cf4c..3e1a7920 100644
--- a/cadre-tea-router/.github/workflows/codeql.yml
+++ b/cadre-tea-router/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/czech-file-knife/.github/workflows/codeql.yml b/czech-file-knife/.github/workflows/codeql.yml
index e79557f2..86ca2596 100644
--- a/czech-file-knife/.github/workflows/codeql.yml
+++ b/czech-file-knife/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/deno-ecosystem/.github/workflows/codeql.yml b/deno-ecosystem/.github/workflows/codeql.yml
index 3575cd97..018b181a 100644
--- a/deno-ecosystem/.github/workflows/codeql.yml
+++ b/deno-ecosystem/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/devkit-risc-v/.github/workflows/codeql.yml b/devkit-risc-v/.github/workflows/codeql.yml
index 5148cf4c..3e1a7920 100644
--- a/devkit-risc-v/.github/workflows/codeql.yml
+++ b/devkit-risc-v/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/dnfinition/.github/workflows/codeql.yml b/dnfinition/.github/workflows/codeql.yml
index 23e01793..9f53ead4 100644
--- a/dnfinition/.github/workflows/codeql.yml
+++ b/dnfinition/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/iser-tools/anvomidaviser/.github/workflows/codeql.yml b/iser-tools/anvomidaviser/.github/workflows/codeql.yml
index e152a864..02861a95 100644
--- a/iser-tools/anvomidaviser/.github/workflows/codeql.yml
+++ b/iser-tools/anvomidaviser/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/iser-tools/betlangiser/.github/workflows/codeql.yml b/iser-tools/betlangiser/.github/workflows/codeql.yml
index e152a864..02861a95 100644
--- a/iser-tools/betlangiser/.github/workflows/codeql.yml
+++ b/iser-tools/betlangiser/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/iser-tools/otpiser/.github/workflows/codeql.yml b/iser-tools/otpiser/.github/workflows/codeql.yml
index e152a864..02861a95 100644
--- a/iser-tools/otpiser/.github/workflows/codeql.yml
+++ b/iser-tools/otpiser/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/rescript-ecosystem/cadre-router/.github/workflows/codeql.yml b/rescript-ecosystem/cadre-router/.github/workflows/codeql.yml
index 3575cd97..018b181a 100644
--- a/rescript-ecosystem/cadre-router/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/cadre-router/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/codeql.yml b/rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/codeql.yml
index f0d675a4..46d187b2 100644
--- a/rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/rescript-ecosystem/packages/bindings/openapi/.github/workflows/codeql.yml b/rescript-ecosystem/packages/bindings/openapi/.github/workflows/codeql.yml
index 62387ade..50918d6c 100644
--- a/rescript-ecosystem/packages/bindings/openapi/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/bindings/openapi/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/bindings/tauri/.github/workflows/codeql.yml b/rescript-ecosystem/packages/bindings/tauri/.github/workflows/codeql.yml
index 61d95da9..e1493d17 100644
--- a/rescript-ecosystem/packages/bindings/tauri/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/bindings/tauri/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/core/early-return/.github/workflows/codeql.yml b/rescript-ecosystem/packages/core/early-return/.github/workflows/codeql.yml
index 61d95da9..e1493d17 100644
--- a/rescript-ecosystem/packages/core/early-return/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/core/early-return/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/core/poly-core/.github/workflows/codeql.yml b/rescript-ecosystem/packages/core/poly-core/.github/workflows/codeql.yml
index 3575cd97..018b181a 100644
--- a/rescript-ecosystem/packages/core/poly-core/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/core/poly-core/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/core/runtime-tools/.github/workflows/codeql.yml b/rescript-ecosystem/packages/core/runtime-tools/.github/workflows/codeql.yml
index 61d95da9..e1493d17 100644
--- a/rescript-ecosystem/packages/core/runtime-tools/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/core/runtime-tools/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/codeql.yml b/rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/codeql.yml
index dd59c36b..e0c928c3 100644
--- a/rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/codeql.yml
@@ -6,7 +6,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 permissions: read-all
 jobs:
   analyze:
diff --git a/rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/codeql.yml b/rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/codeql.yml
index 5148cf4c..3e1a7920 100644
--- a/rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/codeql.yml b/rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/codeql.yml
index 5148cf4c..3e1a7920 100644
--- a/rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/tooling/create-poly/.github/workflows/codeql.yml b/rescript-ecosystem/packages/tooling/create-poly/.github/workflows/codeql.yml
index 3575cd97..018b181a 100644
--- a/rescript-ecosystem/packages/tooling/create-poly/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/tooling/create-poly/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/rescript-tea/.github/workflows/codeql.yml b/rescript-ecosystem/rescript-tea/.github/workflows/codeql.yml
index e152a864..02861a95 100644
--- a/rescript-ecosystem/rescript-tea/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/rescript-tea/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/rescript-ecosystem/rescript-vite/.github/workflows/codeql.yml b/rescript-ecosystem/rescript-vite/.github/workflows/codeql.yml
index cb440519..7eebb3c3 100644
--- a/rescript-ecosystem/rescript-vite/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/rescript-vite/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/riscv-guix-buildsys/.github/workflows/codeql.yml b/riscv-guix-buildsys/.github/workflows/codeql.yml
index 3575cd97..018b181a 100644
--- a/riscv-guix-buildsys/.github/workflows/codeql.yml
+++ b/riscv-guix-buildsys/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/scaffoldia/.github/workflows/codeql.yml b/scaffoldia/.github/workflows/codeql.yml
index 6368f078..7b01965e 100644
--- a/scaffoldia/.github/workflows/codeql.yml
+++ b/scaffoldia/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/techstack-enforcer/.github/workflows/codeql.yml b/techstack-enforcer/.github/workflows/codeql.yml
index 7f6e34dd..c42eddcf 100644
--- a/techstack-enforcer/.github/workflows/codeql.yml
+++ b/techstack-enforcer/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/v-ecosystem/v-benchmarks/.github/workflows/codeql.yml b/v-ecosystem/v-benchmarks/.github/workflows/codeql.yml
index cb440519..7eebb3c3 100644
--- a/v-ecosystem/v-benchmarks/.github/workflows/codeql.yml
+++ b/v-ecosystem/v-benchmarks/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/v-ecosystem/v-grpc/.github/workflows/codeql.yml b/v-ecosystem/v-grpc/.github/workflows/codeql.yml
index e152a864..02861a95 100644
--- a/v-ecosystem/v-grpc/.github/workflows/codeql.yml
+++ b/v-ecosystem/v-grpc/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/v-ecosystem/v-telemetry/.github/workflows/codeql.yml b/v-ecosystem/v-telemetry/.github/workflows/codeql.yml
index cb440519..7eebb3c3 100644
--- a/v-ecosystem/v-telemetry/.github/workflows/codeql.yml
+++ b/v-ecosystem/v-telemetry/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/v-ecosystem/v_api_interfaces/v_grpc/.github/workflows/codeql.yml b/v-ecosystem/v_api_interfaces/v_grpc/.github/workflows/codeql.yml
index cb440519..7eebb3c3 100644
--- a/v-ecosystem/v_api_interfaces/v_grpc/.github/workflows/codeql.yml
+++ b/v-ecosystem/v_api_interfaces/v_grpc/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/v-ecosystem/v_api_interfaces/v_rest/.github/workflows/codeql.yml b/v-ecosystem/v_api_interfaces/v_rest/.github/workflows/codeql.yml
index cb440519..7eebb3c3 100644
--- a/v-ecosystem/v_api_interfaces/v_rest/.github/workflows/codeql.yml
+++ b/v-ecosystem/v_api_interfaces/v_rest/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all