diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ab9caec..f914bb1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,6 +17,7 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f1a8b2d..b7f75a7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,6 +14,7 @@ jobs:
   publish:
     name: Test, build & publish to PyPI
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     environment: pypi # must match the environment on the PyPI trusted publisher
     permissions:
       id-token: write # OIDC for PyPI Trusted Publishing (no token stored)