ci: add timeout limits (#6178)

So that they fail early instead of letting them run indefinitely when
there are problems with the CI infrastructure.

Use 5 minutes for the jobs that usually complete in under a minute
(check-profiles and codespell) and 10 minutes for the rest (most jobs
usually take 1-3 minutes).

8 files changed, 22 insertions, 0 deletions

diff --git a/.github/workflows/build-extra.yml b/.github/workflows/build-extra.yml
index 6c2905e43..3e0cec9c5 100644
--- a/.github/workflows/build-extra.yml
+++ b/.github/workflows/build-extra.yml
@@ -41,6 +41,7 @@ permissions:  # added using https://github.com/step-security/secure-workflows
 jobs:
   build-clang:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ae1aef039..b63eee824 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -57,6 +57,7 @@ permissions:  # added using https://github.com/step-security/secure-workflows
 jobs:
   build:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
diff --git a/.github/workflows/check-c.yml b/.github/workflows/check-c.yml
index 16e034d48..ef952d132 100644
--- a/.github/workflows/check-c.yml
+++ b/.github/workflows/check-c.yml
@@ -43,6 +43,7 @@ permissions:  # added using https://github.com/step-security/secure-workflows
 jobs:
   scan-build:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
@@ -74,6 +75,7 @@ jobs:
 
   cppcheck:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
@@ -101,6 +103,7 @@ jobs:
   # scan all files also with older cppcheck version from ubuntu 20.04.
   cppcheck_old:
     runs-on: ubuntu-20.04
+    timeout-minutes: 10
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
@@ -129,6 +132,7 @@ jobs:
       contents: read
       security-events: write
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
     - name: Harden Runner
diff --git a/.github/workflows/check-profiles.yml b/.github/workflows/check-profiles.yml
index 0185376a4..2ae600301 100644
--- a/.github/workflows/check-profiles.yml
+++ b/.github/workflows/check-profiles.yml
@@ -29,6 +29,8 @@ permissions:  # added using https://github.com/step-security/secure-workflows
 jobs:
   profile-checks:
     runs-on: ubuntu-latest
+    timeout-minutes: 5
+
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
diff --git a/.github/workflows/check-python.yml b/.github/workflows/check-python.yml
index 76eaa584e..bd3371c9e 100644
--- a/.github/workflows/check-python.yml
+++ b/.github/workflows/check-python.yml
@@ -27,6 +27,7 @@ jobs:
       contents: read
       security-events: write
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
     - name: Harden Runner
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index f3c512c3e..c6350838a 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -21,6 +21,7 @@ permissions:  # added using https://github.com/step-security/secure-workflows
 jobs:
   codespell:
     runs-on: ubuntu-22.04
+    timeout-minutes: 5
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 0a6069a5c..f7ba1ae4f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -49,6 +49,7 @@ permissions:  # added using https://github.com/step-security/secure-workflows
 jobs:
   test-main:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     env:
       SHELL: /bin/bash
     steps:
@@ -96,6 +97,7 @@ jobs:
 
   test-fs:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     env:
       SHELL: /bin/bash
     steps:
@@ -134,6 +136,7 @@ jobs:
 
   test-environment:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     env:
       SHELL: /bin/bash
     steps:
@@ -172,6 +175,7 @@ jobs:
 
   test-utils:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     env:
       SHELL: /bin/bash
     steps:
@@ -212,6 +216,7 @@ jobs:
 
   test-network:
     runs-on: ubuntu-22.04
+    timeout-minutes: 10
     env:
       SHELL: /bin/bash
     steps:
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index cb88c0263..08b006f74 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -8,6 +8,7 @@
 
 build_ubuntu_package:
     image: ubuntu:rolling
+    timeout: 10 minutes
     variables:
         DEBIAN_FRONTEND: noninteractive
     script:
@@ -24,6 +25,7 @@ build_ubuntu_package:
 
 build_debian_package:
     image: debian:buster
+    timeout: 10 minutes
     variables:
         DEBIAN_FRONTEND: noninteractive
     script:
@@ -40,6 +42,7 @@ build_debian_package:
 
 build_redhat_package:
     image: almalinux:latest
+    timeout: 10 minutes
     script:
         - dnf update -y
         - dnf install -y rpm-build gcc make
@@ -51,6 +54,7 @@ build_redhat_package:
 
 build_fedora_package:
     image: fedora:latest
+    timeout: 10 minutes
     script:
         - dnf update -y
         - dnf install -y rpm-build gcc make
@@ -62,6 +66,7 @@ build_fedora_package:
 
 build_src_package:
     image: alpine:latest
+    timeout: 10 minutes
     script:
         - apk update
         - apk upgrade
@@ -74,6 +79,7 @@ build_src_package:
 
 build_no_apparmor:
     image: ubuntu:latest
+    timeout: 10 minutes
     variables:
         DEBIAN_FRONTEND: noninteractive
     script:
@@ -92,6 +98,7 @@ build_no_apparmor:
 
 debian_ci:
     image: registry.salsa.debian.org/salsa-ci-team/ci-image-git-buildpackage:latest
+    timeout: 10 minutes
     variables:
         DEBFULLNAME: "$GITLAB_USER_NAME"
         DEBEMAIL: "$GITLAB_USER_EMAIL"