From a42f94faaddd22cf5cdb8cbc473acb524d4e4f2b Mon Sep 17 00:00:00 2001
From: yeasy <yangbaohua@gmail.com>
Date: Wed, 22 Jul 2026 16:04:50 -0700
Subject: [PATCH] ci: add timeout-minutes to Identity Guard
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

harness_engineering_guide 的 lab/tests/unit/test_project_configuration.py 要求
每个工作流都写 timeout-minutes，我漏了，导致该仓库 CI 变红。

漏检原因值得记一笔：我本地批量跑测试时用的是 `ls tests/test_*.py`，
而 harness 的测试在 lab/tests/ 下、且用 pytest，这个 glob 一个都没匹配到，
于是它被静默报成"OK"。应当按各仓库 ci.yaml 里真正的测试命令来跑。

timeout-minutes 本身也是好实践：避免作业异常时空转到默认上限。
统一给 14 个仓库都加上，与该测试的其余约束（SHA 固定、禁 continue-on-error、
checkout 不持久化凭据）保持一致。
---
 .github/workflows/identity-guard.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/identity-guard.yaml b/.github/workflows/identity-guard.yaml
index e683c44..65e1e1e 100644
--- a/.github/workflows/identity-guard.yaml
+++ b/.github/workflows/identity-guard.yaml
@@ -20,6 +20,7 @@ jobs:
     permissions:
       contents: read
     runs-on: ubuntu-24.04
+    timeout-minutes: 10
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1