Add timeouts.

.github/workflows/ci.yml

@@ -7,6 +7,8 @@ on:
     # Run every day at midnight UTC
     - cron: '0 0 * * *'
 
+timeout-minutes: 30
+
 jobs:
   boringssl_clone:
     # This step ensures that all builders have the same version of BoringSSL
@@ -304,6 +306,7 @@ jobs:
         run: mvn org.apache.maven.plugins:maven-dependency-plugin:3.8.0:copy -Dartifact=org.junit.platform:junit-platform-console-standalone:1.11.2 -DoutputDirectory=. -Dmdep.stripVersion=true
 
       - name: Run JUnit tests
+        timeout-minutes: 15
         shell: bash
         run: |
           DIR="$(find m2/org/conscrypt/conscrypt-openjdk-uber -maxdepth 1 -mindepth 1 -type d -print)"