diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 438fe5d95..90415a986 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 # Estate guardrail: cancel superseded runs so re-pushes / rebased PR
 # updates do not pile up queued runs against the shared account-wide
diff --git a/ada-ecosystem/ada-loom-registry/.github/workflows/codeql.yml b/ada-ecosystem/ada-loom-registry/.github/workflows/codeql.yml
index 5148cf4c5..3e1a7920e 100644
--- a/ada-ecosystem/ada-loom-registry/.github/workflows/codeql.yml
+++ b/ada-ecosystem/ada-loom-registry/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/affinescript-ecosystem/rattlescript/affinescript/.github/workflows/codeql.yml b/affinescript-ecosystem/rattlescript/affinescript/.github/workflows/codeql.yml
index 6551e6c7e..c72b1522d 100644
--- a/affinescript-ecosystem/rattlescript/affinescript/.github/workflows/codeql.yml
+++ b/affinescript-ecosystem/rattlescript/affinescript/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/asdf-augmenters/asdf-control-tower/.github/workflows/codeql.yml b/asdf-augmenters/asdf-control-tower/.github/workflows/codeql.yml
index a2a0bd7b3..4018ffe74 100644
--- a/asdf-augmenters/asdf-control-tower/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-control-tower/.github/workflows/codeql.yml
@@ -6,7 +6,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: "0 6 * * 1"
+    - cron: "0 6 1 * *"
 permissions: read-all
 jobs:
   analyze:
diff --git a/asdf-augmenters/asdf-plugin-collection/plugins/casket-ssg/.github/workflows/codeql.yml b/asdf-augmenters/asdf-plugin-collection/plugins/casket-ssg/.github/workflows/codeql.yml
index 35dd20511..e97d5c033 100644
--- a/asdf-augmenters/asdf-plugin-collection/plugins/casket-ssg/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-plugin-collection/plugins/casket-ssg/.github/workflows/codeql.yml
@@ -6,7 +6,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: "0 6 * * 1"
+    - cron: "0 6 1 * *"
 permissions: read-all
 jobs:
   analyze:
diff --git a/asdf-augmenters/asdf-plugin-collection/plugins/hashicorp/.github/workflows/codeql.yml b/asdf-augmenters/asdf-plugin-collection/plugins/hashicorp/.github/workflows/codeql.yml
index 35dd20511..e97d5c033 100644
--- a/asdf-augmenters/asdf-plugin-collection/plugins/hashicorp/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-plugin-collection/plugins/hashicorp/.github/workflows/codeql.yml
@@ -6,7 +6,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: "0 6 * * 1"
+    - cron: "0 6 1 * *"
 permissions: read-all
 jobs:
   analyze:
diff --git a/asdf-augmenters/asdf-plugin-collection/plugins/openlitespeed/.github/workflows/codeql.yml b/asdf-augmenters/asdf-plugin-collection/plugins/openlitespeed/.github/workflows/codeql.yml
index 61d95da9d..e1493d174 100644
--- a/asdf-augmenters/asdf-plugin-collection/plugins/openlitespeed/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-plugin-collection/plugins/openlitespeed/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/asdf-augmenters/asdf-security-plugin/.github/workflows/codeql.yml b/asdf-augmenters/asdf-security-plugin/.github/workflows/codeql.yml
index 61d95da9d..e1493d174 100644
--- a/asdf-augmenters/asdf-security-plugin/.github/workflows/codeql.yml
+++ b/asdf-augmenters/asdf-security-plugin/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/cadre-tea-router/.github/workflows/codeql.yml b/cadre-tea-router/.github/workflows/codeql.yml
index 5148cf4c5..3e1a7920e 100644
--- a/cadre-tea-router/.github/workflows/codeql.yml
+++ b/cadre-tea-router/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/czech-file-knife/.github/workflows/codeql.yml b/czech-file-knife/.github/workflows/codeql.yml
index e79557f23..86ca25961 100644
--- a/czech-file-knife/.github/workflows/codeql.yml
+++ b/czech-file-knife/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/deno-ecosystem/.github/workflows/codeql.yml b/deno-ecosystem/.github/workflows/codeql.yml
index 3575cd97c..018b181a1 100644
--- a/deno-ecosystem/.github/workflows/codeql.yml
+++ b/deno-ecosystem/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/devkit-risc-v/.github/workflows/codeql.yml b/devkit-risc-v/.github/workflows/codeql.yml
index 5148cf4c5..3e1a7920e 100644
--- a/devkit-risc-v/.github/workflows/codeql.yml
+++ b/devkit-risc-v/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/dnfinition/.github/workflows/codeql.yml b/dnfinition/.github/workflows/codeql.yml
index 23e01793d..9f53ead4c 100644
--- a/dnfinition/.github/workflows/codeql.yml
+++ b/dnfinition/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/iser-tools/anvomidaviser/.github/workflows/codeql.yml b/iser-tools/anvomidaviser/.github/workflows/codeql.yml
index e152a8644..02861a956 100644
--- a/iser-tools/anvomidaviser/.github/workflows/codeql.yml
+++ b/iser-tools/anvomidaviser/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/iser-tools/betlangiser/.github/workflows/codeql.yml b/iser-tools/betlangiser/.github/workflows/codeql.yml
index e152a8644..02861a956 100644
--- a/iser-tools/betlangiser/.github/workflows/codeql.yml
+++ b/iser-tools/betlangiser/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/iser-tools/otpiser/.github/workflows/codeql.yml b/iser-tools/otpiser/.github/workflows/codeql.yml
index e152a8644..02861a956 100644
--- a/iser-tools/otpiser/.github/workflows/codeql.yml
+++ b/iser-tools/otpiser/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/rescript-ecosystem/cadre-router/.github/workflows/codeql.yml b/rescript-ecosystem/cadre-router/.github/workflows/codeql.yml
index 3575cd97c..018b181a1 100644
--- a/rescript-ecosystem/cadre-router/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/cadre-router/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/codeql.yml b/rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/codeql.yml
index f0d675a4d..46d187b2f 100644
--- a/rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/idaptik-rescript13-staging/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/rescript-ecosystem/packages/bindings/openapi/.github/workflows/codeql.yml b/rescript-ecosystem/packages/bindings/openapi/.github/workflows/codeql.yml
index 62387adef..50918d6c8 100644
--- a/rescript-ecosystem/packages/bindings/openapi/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/bindings/openapi/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/bindings/tauri/.github/workflows/codeql.yml b/rescript-ecosystem/packages/bindings/tauri/.github/workflows/codeql.yml
index 61d95da9d..e1493d174 100644
--- a/rescript-ecosystem/packages/bindings/tauri/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/bindings/tauri/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/core/early-return/.github/workflows/codeql.yml b/rescript-ecosystem/packages/core/early-return/.github/workflows/codeql.yml
index 61d95da9d..e1493d174 100644
--- a/rescript-ecosystem/packages/core/early-return/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/core/early-return/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/core/poly-core/.github/workflows/codeql.yml b/rescript-ecosystem/packages/core/poly-core/.github/workflows/codeql.yml
index 3575cd97c..018b181a1 100644
--- a/rescript-ecosystem/packages/core/poly-core/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/core/poly-core/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/core/runtime-tools/.github/workflows/codeql.yml b/rescript-ecosystem/packages/core/runtime-tools/.github/workflows/codeql.yml
index 61d95da9d..e1493d174 100644
--- a/rescript-ecosystem/packages/core/runtime-tools/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/core/runtime-tools/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/codeql.yml b/rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/codeql.yml
index dd59c36bd..e0c928c3e 100644
--- a/rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/ffi/zig-ffi/.github/workflows/codeql.yml
@@ -6,7 +6,7 @@ on:
   pull_request:
     branches: [main]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 permissions: read-all
 jobs:
   analyze:
diff --git a/rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/codeql.yml b/rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/codeql.yml
index 5148cf4c5..3e1a7920e 100644
--- a/rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/tooling/alib-codemods/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/codeql.yml b/rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/codeql.yml
index 5148cf4c5..3e1a7920e 100644
--- a/rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/tooling/alib-for-rescript/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/packages/tooling/create-poly/.github/workflows/codeql.yml b/rescript-ecosystem/packages/tooling/create-poly/.github/workflows/codeql.yml
index 3575cd97c..018b181a1 100644
--- a/rescript-ecosystem/packages/tooling/create-poly/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/packages/tooling/create-poly/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/rescript-ecosystem/rescript-tea/.github/workflows/codeql.yml b/rescript-ecosystem/rescript-tea/.github/workflows/codeql.yml
index e152a8644..02861a956 100644
--- a/rescript-ecosystem/rescript-tea/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/rescript-tea/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/rescript-ecosystem/rescript-vite/.github/workflows/codeql.yml b/rescript-ecosystem/rescript-vite/.github/workflows/codeql.yml
index cb4405192..7eebb3c3d 100644
--- a/rescript-ecosystem/rescript-vite/.github/workflows/codeql.yml
+++ b/rescript-ecosystem/rescript-vite/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/riscv-guix-buildsys/.github/workflows/codeql.yml b/riscv-guix-buildsys/.github/workflows/codeql.yml
index 3575cd97c..018b181a1 100644
--- a/riscv-guix-buildsys/.github/workflows/codeql.yml
+++ b/riscv-guix-buildsys/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/scaffoldia/.github/workflows/codeql.yml b/scaffoldia/.github/workflows/codeql.yml
index 6368f0787..7b01965e6 100644
--- a/scaffoldia/.github/workflows/codeql.yml
+++ b/scaffoldia/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/techstack-enforcer/.github/workflows/codeql.yml b/techstack-enforcer/.github/workflows/codeql.yml
index 7f6e34dd3..c42eddcf9 100644
--- a/techstack-enforcer/.github/workflows/codeql.yml
+++ b/techstack-enforcer/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/v-ecosystem/v-benchmarks/.github/workflows/codeql.yml b/v-ecosystem/v-benchmarks/.github/workflows/codeql.yml
index cb4405192..7eebb3c3d 100644
--- a/v-ecosystem/v-benchmarks/.github/workflows/codeql.yml
+++ b/v-ecosystem/v-benchmarks/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/v-ecosystem/v-grpc/.github/workflows/codeql.yml b/v-ecosystem/v-grpc/.github/workflows/codeql.yml
index e152a8644..02861a956 100644
--- a/v-ecosystem/v-grpc/.github/workflows/codeql.yml
+++ b/v-ecosystem/v-grpc/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions:
   contents: read
diff --git a/v-ecosystem/v-telemetry/.github/workflows/codeql.yml b/v-ecosystem/v-telemetry/.github/workflows/codeql.yml
index cb4405192..7eebb3c3d 100644
--- a/v-ecosystem/v-telemetry/.github/workflows/codeql.yml
+++ b/v-ecosystem/v-telemetry/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/v-ecosystem/v_api_interfaces/v_grpc/.github/workflows/codeql.yml b/v-ecosystem/v_api_interfaces/v_grpc/.github/workflows/codeql.yml
index cb4405192..7eebb3c3d 100644
--- a/v-ecosystem/v_api_interfaces/v_grpc/.github/workflows/codeql.yml
+++ b/v-ecosystem/v_api_interfaces/v_grpc/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all
 
diff --git a/v-ecosystem/v_api_interfaces/v_rest/.github/workflows/codeql.yml b/v-ecosystem/v_api_interfaces/v_rest/.github/workflows/codeql.yml
index cb4405192..7eebb3c3d 100644
--- a/v-ecosystem/v_api_interfaces/v_rest/.github/workflows/codeql.yml
+++ b/v-ecosystem/v_api_interfaces/v_rest/.github/workflows/codeql.yml
@@ -7,7 +7,7 @@ on:
   pull_request:
     branches: [main, master]
   schedule:
-    - cron: '0 6 * * 1'
+    - cron: '0 6 1 * *'
 
 permissions: read-all