diff --git a/.github/workflows/CICD.yml b/.github/workflows/CICD.yml
index 4385ae152dc..8c70401f357 100644
--- a/.github/workflows/CICD.yml
+++ b/.github/workflows/CICD.yml
@@ -856,7 +856,7 @@ jobs:
         lima ls
         lima bash -c "cd work && cargo test --features 'feat_selinux' --no-default-features"
     - name: Lint with SELinux
-      run: lima bash -c "cd work && cargo clippy --all-targets --features 'feat_selinux' --no-default-features -- -D warnings"
+      run: lima bash -c "cd work && cargo clippy --workspace --all-targets --features 'feat_selinux' --no-default-features -- -D warnings"
 
   test_selinux_stubs:
     name: Build/SELinux-Stubs (Non-Linux)
@@ -884,7 +884,7 @@ jobs:
         test -f target/debug/runcon || test -f target/debug/runcon.exe
     # check is enough to detect workspace breakage by chcon
     - name: Verify workspace builds with stubs
-      run: cargo check --features ${{ matrix.job.features }}
+      run: cargo check --workspace --features ${{ matrix.job.features }}
 
   test_safe_traversal:
     name: Safe Traversal Security Check
diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml
index 7b7bf87e06a..48a46c6f890 100644
--- a/.github/workflows/code-quality.yml
+++ b/.github/workflows/code-quality.yml
@@ -73,7 +73,7 @@ jobs:
         job:
           - { os: ubuntu-latest  , features: all             , workspace: true }
           - { os: macos-latest   , features: feat_os_unix }
-          - { os: windows-latest , features: feat_os_windows }
+          - { os: windows-latest , features: feat_os_windows , workspace: true }
           - { os: ubuntu-latest  , features: feat_wasm , target: wasm32-wasip1 }
     steps:
     - uses: actions/checkout@v6