diff --git a/.github/workflows/create-rule-meta.yml b/.github/workflows/create-rule-meta.yml
index 7f91f0da..3b720064 100644
--- a/.github/workflows/create-rule-meta.yml
+++ b/.github/workflows/create-rule-meta.yml
@@ -1,7 +1,7 @@
 name: create security_rules.json
 on:
   schedule:
-    - cron: '0 20 * * *'
+    - cron: '0 20 1 * *'
   workflow_dispatch:
 
 permissions: