diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1e393c0..2e916f4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,6 +15,7 @@ jobs:
         go: ['1.23', stable]
     name: test (${{ matrix.os }}, go ${{ matrix.go }})
     runs-on: ${{ matrix.os }}
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
@@ -38,6 +39,7 @@ jobs:
   # checks Babashka fails don't break proof's CI.
   action:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v7
       - uses: DeLaGuardo/setup-clojure@13.7.0
diff --git a/.github/workflows/compat.yml b/.github/workflows/compat.yml
index 2d09660..e39f078 100644
--- a/.github/workflows/compat.yml
+++ b/.github/workflows/compat.yml
@@ -14,6 +14,9 @@ jobs:
   run:
     name: ${{ matrix.profile }}
     runs-on: ubuntu-24.04
+    # A run takes a couple of minutes, but a server that never answers
+    # makes each check wait for its timeout.
+    timeout-minutes: 30
     strategy:
       fail-fast: false
       matrix:
@@ -103,6 +106,7 @@ jobs:
     needs: run
     if: always()
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ef4f153..9eb331f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,6 +13,7 @@ permissions:
 jobs:
   release:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7