diff --git a/.github/workflows/cli.yaml b/.github/workflows/cli.yaml
index e81f82b888..c9b2cbc146 100644
--- a/.github/workflows/cli.yaml
+++ b/.github/workflows/cli.yaml
@@ -24,6 +24,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: cli-test
       - name: Setup TEST_GIT_BRANCH
diff --git a/.github/workflows/codecov.yaml b/.github/workflows/codecov.yaml
index eac49813d3..e97506859e 100644
--- a/.github/workflows/codecov.yaml
+++ b/.github/workflows/codecov.yaml
@@ -23,6 +23,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: codecov
       - name: Generate Code Coverage Report
diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml
index 142e8e5757..ce3838c91b 100644
--- a/.github/workflows/conformance.yaml
+++ b/.github/workflows/conformance.yaml
@@ -20,6 +20,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: build-images
       - name: ko build
@@ -80,6 +81,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: run-conformance
       - name: Create kind cluster
@@ -140,6 +142,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: run-conformance
       - name: Create kind cluster
@@ -200,6 +203,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: run-conformance
       - name: Create kind cluster
@@ -258,6 +262,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: run-conformance
       - name: Create kind cluster
@@ -349,6 +354,7 @@ jobs:
           path: policies
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: run-conformance
       - name: Create kind cluster
diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
index 4d42ada543..d2254f41ce 100644
--- a/.github/workflows/fossa.yml
+++ b/.github/workflows/fossa.yml
@@ -25,6 +25,7 @@ jobs:
       - name: Setup build env
         if: steps.checksecret.outputs.result == 'true'
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
       - name: Run FOSSA analysis
         if: steps.checksecret.outputs.result == 'true'
         uses: fossas/fossa-action@f61a4c0c263690f2ddb54b9822a719c25a7b608f # v1.3.1
diff --git a/.github/workflows/helm-release.yaml b/.github/workflows/helm-release.yaml
index bdb76f6589..fe166b9079 100644
--- a/.github/workflows/helm-release.yaml
+++ b/.github/workflows/helm-release.yaml
@@ -18,6 +18,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
       - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0
         with:
           python-version: 3.7
@@ -51,6 +52,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
 
       - name: Install Helm
         uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5
diff --git a/.github/workflows/helm-test.yaml b/.github/workflows/helm-test.yaml
index 869af5d09f..4be8f2b081 100644
--- a/.github/workflows/helm-test.yaml
+++ b/.github/workflows/helm-test.yaml
@@ -23,6 +23,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: helm-tests
       - name: Setup python
diff --git a/.github/workflows/images-build.yaml b/.github/workflows/images-build.yaml
index 3e36961c79..6684f4d127 100644
--- a/.github/workflows/images-build.yaml
+++ b/.github/workflows/images-build.yaml
@@ -19,6 +19,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: build-images
       - name: ko build
diff --git a/.github/workflows/images-publish.yaml b/.github/workflows/images-publish.yaml
index 5e467300bb..30d9c2e480 100644
--- a/.github/workflows/images-publish.yaml
+++ b/.github/workflows/images-publish.yaml
@@ -30,6 +30,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: publish-images
       - name: Run Trivy vulnerability scanner in repo mode
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 3306cdb8aa..5e369d8f3a 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -23,6 +23,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.5.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: lint
       - name: golangci-lint
diff --git a/.github/workflows/nancy.yaml b/.github/workflows/nancy.yaml
index 2d8043ad6b..558301d8b6 100644
--- a/.github/workflows/nancy.yaml
+++ b/.github/workflows/nancy.yaml
@@ -24,6 +24,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
       - name: WriteGoList
         run: go list -json -m all > go.list
       - name: Nancy SAST Scan
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d7cb483eae..962f5fc4ec 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -25,6 +25,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: release-images
       - name: Run Trivy vulnerability scanner in repo mode
@@ -229,6 +230,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
       - uses: creekorful/goreportcard-action@1f35ced8cdac2cba28c9a2f2288a16aacfd507f9 # v1.0
       - name: Install Cosign
         uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 # v3.1.1
@@ -260,6 +262,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
       - name: Setup Flux CLI
         uses: fluxcd/flux2/action@22cf986a79a6da2dd1bcd91b5eef763400f0104b # v2.1.0
         with:
@@ -312,6 +315,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
       - name: Check Tag
         id: check-tag
         run: |
diff --git a/.github/workflows/sonarcloud.yaml b/.github/workflows/sonarcloud.yaml
index c98672c7dd..731c2cf30b 100644
--- a/.github/workflows/sonarcloud.yaml
+++ b/.github/workflows/sonarcloud.yaml
@@ -26,6 +26,7 @@ jobs:
       - name: Setup build env
         if: steps.checksecret.outputs.result == 'true'
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
       - name: SonarCloud Scan
         if: steps.checksecret.outputs.result == 'true'
         uses: sonarsource/sonarcloud-github-action@db501078e936e4b4c8773d1bb949ba9ddb7b6b6a # v1.9
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index fd71dddefe..62281e9489 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -23,6 +23,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: tests
       - name: Unit test
diff --git a/.github/workflows/verify-codegen.yaml b/.github/workflows/verify-codegen.yaml
index d3b354e95d..bfd0fcc125 100644
--- a/.github/workflows/verify-codegen.yaml
+++ b/.github/workflows/verify-codegen.yaml
@@ -23,6 +23,7 @@ jobs:
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
       - name: Setup build env
         uses: ./.github/actions/setup-build-env
+        timeout-minutes: 6
         with:
           build-cache-key: verify-codegen
       - name: Verify generated code is up to date