From 78dad45f3bd13727653633fa43ec62cc336fe6e6 Mon Sep 17 00:00:00 2001
From: Nicholas Marriott <nicholas.marriott@gmail.com>
Date: Fri, 28 Aug 2026 09:06:45 +0100
Subject: [PATCH] Add timeout for lock and don't keep credentials for regress,
 from Andreas Fehlner.

---
 .github/workflows/lock.yml    | 1 +
 .github/workflows/regress.yml | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
index e6765da99..ab9529b65 100644
--- a/.github/workflows/lock.yml
+++ b/.github/workflows/lock.yml
@@ -17,6 +17,7 @@ jobs:
   action:
     runs-on: ubuntu-latest
     if: github.repository == 'tmux/tmux'
+    timeout-minutes: 10
     steps:
       - uses: dessant/lock-threads@v6
         with:
diff --git a/.github/workflows/regress.yml b/.github/workflows/regress.yml
index a84478357..376fc7bde 100644
--- a/.github/workflows/regress.yml
+++ b/.github/workflows/regress.yml
@@ -39,6 +39,8 @@ jobs:
     steps:
       - name: checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: dependencies
         if: runner.os == 'Linux'