diff --git a/.github/workflows/maven-build.yml b/.github/workflows/maven-build.yml
index 9520fede63..4aef446c0c 100644
--- a/.github/workflows/maven-build.yml
+++ b/.github/workflows/maven-build.yml
@@ -109,9 +109,12 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build, test-8, test]
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    permissions:
+      contents: read
+      packages: write
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-java@v2
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
         with:
           java-version: 8
           distribution: 'zulu'