From 23924f26f5078d111333dd1142bc9f58bb36916c Mon Sep 17 00:00:00 2001 From: Sayan- <1415138+Sayan-@users.noreply.github.com> Date: Fri, 11 Sep 2026 21:19:35 +0000 Subject: [PATCH] Cap semgrep scan and triage job runtimes Without timeout-minutes these jobs get GitHub's 6-hour default, so a degraded run holds a runner and blocks the calling PR's checks for hours. Scan medians ~2 minutes with a worst observed successful run of 18; triage typically finishes in ~2. A killed run reruns cheaply. Co-Authored-By: Claude Fable 5 --- .github/workflows/semgrep.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index ee75ee3..55789bc 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -17,6 +17,7 @@ on: jobs: scan: runs-on: ubuntu-latest + timeout-minutes: 20 container: image: semgrep/semgrep outputs: @@ -81,6 +82,7 @@ jobs: triage: runs-on: ubuntu-latest + timeout-minutes: 15 needs: scan if: needs.scan.outputs.findings_count != '0' && fromJson(needs.scan.outputs.findings_count) <= 20 steps: