fix(ci): add 10m timeout to secret-scan job (mc#1099 follow-up)

Frozen runner holding a runner slot indefinitely blocks all CI. // Key: infra-sre
2026-05-16 00:08:17 +00:00
1 changed files with 5 additions and 0 deletions
@@ -30,6 +30,11 @@ jobs:
  scan:
    name: Scan diff for credential-shaped strings
    runs-on: ubuntu-latest
+    # Hard CI gate — must complete or the PR is unmergable. 10-minute ceiling
+    # is generous for a diff-scan against a single SHA. If this times out, the
+    # runner is frozen and holding a slot — the step timeout triggers clean
+    # failure, releasing the runner for the next job.
+    timeout-minutes: 10
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with: