LGTM, perhaps we can update docs in a future PR to mention the timeout config, etc. _Originally posted by @gvauter in https://github.com/oscal-compass/compliance-to-policy-go/pull/175#pullrequestreview-3045405535_