diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 90beb20..75ddfae 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -9,9 +9,9 @@ permissions:
   actions: write
   checks: write
   contents: read
-  deployments: read
+  deployments: none
   issues: write
-  discussions: read
+  discussions: none
   packages: none
   pages: read
   pull-requests: write
@@ -25,15 +25,15 @@ jobs:
       fail-fast: false
       matrix:
         java: [8, 17, 22]
-        os: [ubuntu-latest, macos-latest, windows-latest]
+        os: [ubuntu-latest, macos-latest]
     steps:
       - name: Checkout the repo
         uses: actions/checkout@v4
       - name: Setup Java
         uses: actions/setup-java@v4
         with:
-          distribution: 'zulu'
+          distribution: 'corretto'
           java-version: ${{ matrix.java }}
           cache: maven
       - name: Compile with Maven
-        run: mvn --batch-mode verify
+        run: mvn --batch-mode clean verify
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9c165b5..5d54b06 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,13 +6,13 @@ on:
 permissions:
   actions: write
   checks: write
-  contents: write
+  contents: read
   deployments: read
   issues: write
   discussions: write
   packages: write
   pages: write
-  pull-requests: write
+  pull-requests: read
   security-events: write
   statuses: write
 
diff --git a/pom.xml b/pom.xml
index b97b705..66ae72c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,6 +118,14 @@
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-surefire-plugin</artifactId>
         <version>3.3.0</version>
+        <configuration>
+          <includes>
+            <include>**/*Test.kt</include>
+          </includes>
+          <useSystemClassLoader>false</useSystemClassLoader>
+          <includeJUnit5Engines>true</includeJUnit5Engines>
+          <argLine>-Djava.security.manager=allow</argLine>
+        </configuration>
       </plugin>
       <plugin>
         <artifactId>maven-source-plugin</artifactId>