diff --git a/.github/workflows/beta-release.yaml b/.github/workflows/beta-release.yaml
index e412b50..054b272 100644
--- a/.github/workflows/beta-release.yaml
+++ b/.github/workflows/beta-release.yaml
@@ -8,6 +8,8 @@ on:
 jobs:
   release-management:
     runs-on: ubuntu-latest
+    # Observed fleet-wide: n=26 runs, max 0.7 min; bounded loosely at 45 min because a spurious release failure is expensive
+    timeout-minutes: 45
     steps:
 
       - name: Checkout Code
diff --git a/.github/workflows/build-exapp.yaml b/.github/workflows/build-exapp.yaml
index cf8593b..00cfcd0 100644
--- a/.github/workflows/build-exapp.yaml
+++ b/.github/workflows/build-exapp.yaml
@@ -18,6 +18,8 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
+    # No successful runs observed yet (multi-arch docker build); bounded loosely at 30 min
+    timeout-minutes: 30
     permissions:
       contents: read
       packages: write
diff --git a/.github/workflows/pull-request-from-branch-check.yaml b/.github/workflows/pull-request-from-branch-check.yaml
index 1c264ed..6fdef61 100644
--- a/.github/workflows/pull-request-from-branch-check.yaml
+++ b/.github/workflows/pull-request-from-branch-check.yaml
@@ -9,6 +9,8 @@ on:
 jobs:
   check-branch:
     runs-on: ubuntu-latest
+    # Observed fleet-wide: n=123 runs, max 0.1 min
+    timeout-minutes: 10
     steps:
       - name: Check branch
         run: |
diff --git a/.github/workflows/pull-request-lint-check.yaml b/.github/workflows/pull-request-lint-check.yaml
index 4f8c735..8fc0dfe 100644
--- a/.github/workflows/pull-request-lint-check.yaml
+++ b/.github/workflows/pull-request-lint-check.yaml
@@ -9,6 +9,8 @@ on:
 jobs:
   lint-check:
     runs-on: ubuntu-latest
+    # Observed fleet-wide: n=176 runs, median 0.6 min, max 1.4 min
+    timeout-minutes: 15
 
     steps:
       - name: Checkout repository
diff --git a/.github/workflows/push-development-to-beta.yaml b/.github/workflows/push-development-to-beta.yaml
index a23f924..ed2628b 100644
--- a/.github/workflows/push-development-to-beta.yaml
+++ b/.github/workflows/push-development-to-beta.yaml
@@ -12,6 +12,8 @@ on:
 jobs:
   create-pr:
     runs-on: ubuntu-latest
+    # Observed fleet-wide: n=152 runs, max 5.6 min
+    timeout-minutes: 20
     steps:
       - name: Checkout Code
         uses: actions/checkout@v3
diff --git a/.github/workflows/release-workflow.yaml b/.github/workflows/release-workflow.yaml
index 2cdb0fa..ac46d78 100644
--- a/.github/workflows/release-workflow.yaml
+++ b/.github/workflows/release-workflow.yaml
@@ -15,6 +15,8 @@ on:
 jobs:
   release-management:
     runs-on: ubuntu-latest
+    # Observed fleet-wide: n=26 runs, max 0.7 min; bounded loosely at 45 min because a spurious release failure is expensive
+    timeout-minutes: 45
     steps:
 
       - name: Checkout Code
diff --git a/.github/workflows/unstable-release.yaml b/.github/workflows/unstable-release.yaml
index 9c0d185..59b7a75 100644
--- a/.github/workflows/unstable-release.yaml
+++ b/.github/workflows/unstable-release.yaml
@@ -8,6 +8,8 @@ on:
 jobs:
   release-management:
     runs-on: ubuntu-latest
+    # Observed fleet-wide: n=26 runs, max 0.7 min; bounded loosely at 45 min because a spurious release failure is expensive
+    timeout-minutes: 45
     steps:
 
       - name: Checkout Code