diff --git a/.github/workflows/dispatch-ci.yml b/.github/workflows/dispatch-ci.yml
index 11623bb907..2440b57f5a 100644
--- a/.github/workflows/dispatch-ci.yml
+++ b/.github/workflows/dispatch-ci.yml
@@ -1,9 +1,11 @@
 name: Dispatch CI
 
 on:
-  # At 1:20 PM UTC, only on Tuesday and Wednesday
+  # At 11:55 AM UTC, only on Friday and Saturday
   schedule:
-    - cron: '20 13 * * 2,3'
+    - cron: '55 11 * * 5,6'
+
+permissions: {}
 
 jobs:
   dispatch-ci:
@@ -11,6 +13,9 @@ jobs:
     # Only run cron on the silverstripe account
     if: (github.event_name == 'schedule' && github.repository_owner == 'silverstripe') || (github.event_name != 'schedule')
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: write
     steps:
       - name: Dispatch CI
         uses: silverstripe/gha-dispatch-ci@v1
diff --git a/.github/workflows/keepalive.yml b/.github/workflows/keepalive.yml
index ab90e57430..d6a8c15d13 100644
--- a/.github/workflows/keepalive.yml
+++ b/.github/workflows/keepalive.yml
@@ -1,17 +1,21 @@
 name: Keepalive
 
 on:
-  # At 6:30 PM UTC, on day 15 of the month
+  # At 11:55 AM UTC, on day 20 of the month
   schedule:
-    - cron: '30 18 15 * *'
+    - cron: '55 11 20 * *'
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   keepalive:
     name: Keepalive
     # Only run cron on the silverstripe account
     if: (github.event_name == 'schedule' && github.repository_owner == 'silverstripe') || (github.event_name != 'schedule')
     runs-on: ubuntu-latest
+    permissions:
+      actions: write
     steps:
       - name: Keepalive
         uses: silverstripe/gha-keepalive@v1
diff --git a/.github/workflows/update-js.yml b/.github/workflows/update-js.yml
index b2b8205a99..8fce7815f0 100644
--- a/.github/workflows/update-js.yml
+++ b/.github/workflows/update-js.yml
@@ -4,7 +4,9 @@ on:
   workflow_dispatch:
   # Run on a schedule of once per quarter
   schedule:
-    - cron: '30 18 1 */3 *'
+    - cron: '55 11 1 */3 *'
+
+permissions: {}
 
 jobs:
   update-js:
@@ -12,6 +14,10 @@ jobs:
     # Only run cron on the silverstripe account
     if: (github.event_name == 'schedule' && github.repository_owner == 'silverstripe') || (github.event_name != 'schedule')
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      actions: write
     steps:
       - name: Update JS
         uses: silverstripe/gha-update-js@v1
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
deleted file mode 100644
index c395368e4b..0000000000
--- a/CONTRIBUTING.md
+++ /dev/null
@@ -1,19 +0,0 @@
-# Contributing
-
-Any open source product is only as good as the community behind it. You can participate by sharing code, ideas, or simply helping others. No matter what your skill level is, every contribution counts.
-
-See our [high level overview](https://www.silverstripe.org/community/contributing-to-silverstripe) on silverstripe.org on how you can help out.
-
-Or, for more detailed guidance, read one of the following pages:
-
- * [Sharing your opinion and raising issues](https://docs.silverstripe.org/en/4/contributing/issues_and_bugs/)
- * [Providing code, whether it's creating a feature or fixing a bug](https://docs.silverstripe.org/en/4/contributing/code/)
- * [Writing and translating documentation](https://docs.silverstripe.org/en/4/contributing/translations/)
- * [Translating user-interface elements](https://docs.silverstripe.org/en/4/contributing/translation_process/)
-
-## Copyright
-
-**IMPORTANT: By supplying code to the SilverStripe core team in patches, tickets and pull requests, you agree to assign copyright of that code to SilverStripe Limited, on the condition that SilverStripe Limited releases that code under the BSD license.**
-
-We ask for this so that the ownership in the license is clear and unambiguous, and so that community involvement doesn't stop us from being able to continue supporting these projects. By releasing this code under a permissive license, this copyright assignment won't prevent you from using the code in any way you see fit.
-