diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 347f520e6..58321baab 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,6 +18,7 @@ jobs:
   rust:
     needs: codegen
     name: Rust workspace
+    timeout-minutes: 30
     runs-on: ubuntu-latest
     env:
       RUSTFLAGS: "-D warnings"
@@ -69,6 +70,7 @@ jobs:
 
   wasm-provider:
     name: truapi-provider (wasm browser tests)
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -90,6 +92,7 @@ jobs:
 
   licenses:
     name: Dependency licenses
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -103,6 +106,7 @@ jobs:
 
   codegen:
     name: Codegen
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -161,6 +165,7 @@ jobs:
   ios-bindings:
     name: iOS bindings (uniffi)
     needs: codegen
+    timeout-minutes: 15
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -194,6 +199,7 @@ jobs:
 
   changes:
     name: Change filter
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     outputs:
       sdk_swift: ${{ steps.filter.outputs.sdk_swift }}
@@ -412,6 +418,7 @@ jobs:
 
   ts-client:
     name: "@parity/truapi"
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     needs: codegen
     env:
@@ -449,6 +456,7 @@ jobs:
 
   ts-host:
     name: "@parity/truapi-host"
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     needs: codegen
     env:
@@ -482,6 +490,7 @@ jobs:
 
   ts-debugger:
     name: "@parity/truapi-debugger"
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     needs: codegen
     env:
@@ -521,6 +530,7 @@ jobs:
 
   playground:
     name: Playground (build + lint + unit)
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     needs: ts-client
     env:
@@ -574,6 +584,7 @@ jobs:
 
   explorer:
     name: Explorer (build + lint)
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     needs: ts-client
     env:
@@ -717,6 +728,7 @@ jobs:
             -color
   release-guard:
     name: Release guard
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -791,6 +803,7 @@ jobs:
     name: Changeset guard
     needs: changes
     if: github.event_name == 'pull_request' && needs.changes.outputs.needs_changeset == 'true'
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     permissions:
       pull-requests: read
@@ -823,6 +836,7 @@ jobs:
   ci-status:
     name: CI Status
     if: always()
+    timeout-minutes: 10
     runs-on: ubuntu-latest
     # Writing the sticky summary needs more than the workflow's read-only
     # default. Nothing else here writes anything.