diff --git a/.github/workflows/cpp.yml b/.github/workflows/cpp.yml
index 85e7017..e3138f3 100644
--- a/.github/workflows/cpp.yml
+++ b/.github/workflows/cpp.yml
@@ -28,6 +28,9 @@ on:
     - 'envoy-release/**'
     - 'istio-release/**'
 
+  schedule:
+    - cron: '0 0 * * *'
+
 jobs:
 
   format:
@@ -41,8 +44,8 @@ jobs:
 
     - name: Format (clang-format)
       run: |
-        sudo apt-get install clang-format-9
-        find . -name "*.h" -o -name "*.cc" -o -name "*.proto" | grep -v ".pb." | xargs -n1 clang-format-9 -i
+        sudo apt-get install clang-format-12
+        find . -name "*.h" -o -name "*.cc" -o -name "*.proto" | grep -v ".pb." | xargs -n1 clang-format-12 -i
         git diff --exit-code
 
     - name: Format (buildifier)
@@ -55,7 +58,7 @@ jobs:
       run: |
         go install github.com/google/addlicense@latest
         export PATH=$PATH:$(go env GOPATH)/bin
-        addlicense -check .
+        addlicense -ignore="**/BUILD" -check .
 
   protobuf:
     runs-on: ubuntu-latest
diff --git a/bazel/emsdk.patch b/bazel/emsdk.patch
new file mode 100644
index 0000000..21ee899
--- /dev/null
+++ b/bazel/emsdk.patch
@@ -0,0 +1,48 @@
+diff --git a/bazel/emscripten_deps.bzl b/bazel/emscripten_deps.bzl
+index 95801ba..95fdabd 100644
+--- a/bazel/emscripten_deps.bzl
++++ b/bazel/emscripten_deps.bzl
+@@ -69,31 +69,3 @@ def emscripten_deps(emscripten_version = "latest"):
+             build_file = "@emsdk//emscripten_toolchain:emscripten.BUILD",
+             type = "zip",
+         )
+-
+-    if "emscripten_npm_linux" not in excludes:
+-        npm_install(
+-            name = "emscripten_npm_linux",
+-            package_json = "@emscripten_bin_linux//:emscripten/package.json",
+-            package_lock_json = "@emscripten_bin_linux//:emscripten/package-lock.json",
+-        )
+-
+-    if "emscripten_npm_mac" not in excludes:
+-        npm_install(
+-            name = "emscripten_npm_mac",
+-            package_json = "@emscripten_bin_mac//:emscripten/package.json",
+-            package_lock_json = "@emscripten_bin_mac//:emscripten/package-lock.json",
+-        )
+-
+-    if "emscripten_npm_mac_arm64" not in excludes:
+-        npm_install(
+-            name = "emscripten_npm_mac",
+-            package_json = "@emscripten_bin_mac_arm64//:emscripten/package.json",
+-            package_lock_json = "@emscripten_bin_mac_arm64//:emscripten/package-lock.json",
+-        )
+-
+-    if "emscripten_npm_win" not in excludes:
+-        npm_install(
+-            name = "emscripten_npm_win",
+-            package_json = "@emscripten_bin_win//:emscripten/package.json",
+-            package_lock_json = "@emscripten_bin_win//:emscripten/package-lock.json",
+-        )
+diff --git a/bazel/emscripten_toolchain/BUILD.bazel b/bazel/emscripten_toolchain/BUILD.bazel
+index eb36959..12dba37 100644
+--- a/bazel/emscripten_toolchain/BUILD.bazel
++++ b/bazel/emscripten_toolchain/BUILD.bazel
+@@ -13,7 +13,6 @@ filegroup(
+         "env.sh",
+         "env.bat",
+         "@emsdk//:binaries",
+-        "@emsdk//:node_modules",
+         "@nodejs//:node_files",
+     ],
+ )
diff --git a/bazel/repositories.bzl b/bazel/repositories.bzl
index 016abc3..59ec24b 100644
--- a/bazel/repositories.bzl
+++ b/bazel/repositories.bzl
@@ -23,6 +23,8 @@ def proxy_wasm_cpp_sdk_repositories():
         # v3.1.7 with Bazel fixes
         strip_prefix = "emsdk-0ea8f8a8707070e9a7c83fbb4a3065683bcf1799/bazel",
         url = "https://github.com/emscripten-core/emsdk/archive/0ea8f8a8707070e9a7c83fbb4a3065683bcf1799.tar.gz",
+        patches = ["@proxy_wasm_cpp_sdk//bazel:emsdk.patch"],
+        patch_args = ["-p2"],
     )
 
     maybe(