diff --git a/.github/workflows/maven-build.yml b/.github/workflows/maven-build.yml
index 020ac25c3b..8b729b5124 100644
--- a/.github/workflows/maven-build.yml
+++ b/.github/workflows/maven-build.yml
@@ -10,6 +10,11 @@ on:
         - main
         - release/**
 
+permissions:
+    statuses: write
+    checks: write
+    pull-requests: write
+
 jobs:
     mvn-verify:
         name: run mvn verify and do SonarCloud scan
@@ -29,7 +34,17 @@ jobs:
             run: mvn -B sonar:sonar --fail-never
             env:
                 SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-        -   name: Report JUnit results
+        -   name: Report JUnit results at checks
+            uses: dorny/test-reporter@v1
+            if: always()
+            with:
+                name: Maven Tests
+                path: '**/surefire-reports/*.xml'
+                reporter: java-junit
+                fail-on-error: true
+                list-suites: 'failed'
+                list-tests: 'failed'
+        -   name: Report JUnit results at checks as comment
             uses: EnricoMi/publish-unit-test-result-action/composite@v1
             if: always()
             with:
diff --git a/pom.xml b/pom.xml
index c8a8d4eed4..4bdb47d44b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -74,7 +74,7 @@
     <junit.version>4.13.2</junit.version>
     <tomcat.version>9.0.64</tomcat.version>
     <findify-s3mock.version>0.2.6</findify-s3mock.version>
-    <checkstyle.version>10.3</checkstyle.version>
+    <checkstyle.version>10.3.1</checkstyle.version>
     <semver4j.version>3.1.0</semver4j.version>
     <upokecenter-cbor.version>4.5.2</upokecenter-cbor.version>
   </properties>