diff --git a/.github/workflows/security-baseline.yml b/.github/workflows/security-baseline.yml
index 4b7895019..335bb805c 100644
--- a/.github/workflows/security-baseline.yml
+++ b/.github/workflows/security-baseline.yml
@@ -16,6 +16,9 @@ on:
     branches:
       - master
   pull_request:
+  schedule:
+    # Weekly full scan (QVAC-19056 rollout). Staggered per repo across weekdays.
+    - cron: "0 7 * * 0"
   workflow_dispatch:
 
 permissions: