diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 3461871..3ff7430 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -2,9 +2,9 @@ name: CodeQL Analysis
 
 on:
   push:
-    branches: [main]
+    branches: [master]
   pull_request:
-    branches: [main]
+    branches: [master]
   schedule:
     # Run weekly on Monday at 06:17 UTC — off-peak to avoid :00/:30 congestion
     - cron: "17 6 * * 1"
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 9dea7d7..8e54752 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -2,9 +2,9 @@ name: Security Scanning
 
 on:
   push:
-    branches: [main]
+    branches: [master]
   pull_request:
-    branches: [main]
+    branches: [master]
   schedule:
     # Run daily at 05:43 UTC — catch new CVEs early
     - cron: "43 5 * * *"