diff --git a/.github/workflows/ci-digest.yml b/.github/workflows/ci-digest.yml
new file mode 100644
index 0000000..2350bff
--- /dev/null
+++ b/.github/workflows/ci-digest.yml
@@ -0,0 +1,24 @@
+name: "CI digest"
+
+# Weekly summary of how often this repo's workflows fail and how long they take,
+# compared with the previous 12 weeks. The logic is in forms-deploy.
+#
+# For now it is a dry run: the digest goes to the job summary and nothing is
+# posted to Slack. See reusable-ci-digest.yml in forms-deploy for how to go live.
+
+on:
+  schedule:
+    - cron: "27 8 * * 1" # Mondays, around 09:00 UK time
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  digest:
+    name: "CI digest"
+    permissions:
+      actions: read
+      contents: read
+    uses: govuk-forms/forms-deploy/.github/workflows/reusable-ci-digest.yml@main
+    secrets:
+      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_GOVUK_FORMS_DEPLOYMENTS }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c3fa3e7..b226791 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,6 +19,7 @@ permissions:
 jobs:
   test:
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1