diff --git a/pipelines/enterprise-contract.yaml b/pipelines/enterprise-contract.yaml
index 772c1b9969..6248665851 100644
--- a/pipelines/enterprise-contract.yaml
+++ b/pipelines/enterprise-contract.yaml
@@ -47,6 +47,11 @@ spec:
         Public key used to verify signatures. Must be a valid k8s cosign
         reference, e.g. k8s://my-space/my-secret where my-secret contains
         the expected cosign.pub attribute.
+    - name: TIMEOUT
+      type: string
+      description: Timeout setting for `ec validate`.
+      default: "5m0s"
+
   results:
     - name: TEST_OUTPUT
       value: "$(tasks.verify.results.TEST_OUTPUT)"
@@ -69,6 +74,8 @@ spec:
           value: "$(params.PUBLIC_KEY)"
         - name: IGNORE_REKOR
           value: "true"
+        - name: TIMEOUT
+          value: "$(params.TIMEOUT)"
       taskRef:
         resolver: bundles
         params: