diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 6f3f8302f..a47ed684f 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -14,6 +14,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+      # Spotless requires JDK 17+
+      - uses: actions/setup-java@v3
+        with:
+          java-version: 17
+          distribution: temurin
       - name: Spotless Check
         run: ./gradlew spotlessCheck
   javadoc:
@@ -46,7 +51,7 @@ jobs:
         distribution: temurin
     - name: Build and Run Tests
       run: |
-          ./gradlew check -x integTest -x yamlRestTest
+          ./gradlew check -x integTest -x yamlRestTest -x spotlessJava
     - name: Upload Coverage Report
       if: ${{ matrix.codecov }}
       uses: codecov/codecov-action@v3
diff --git a/build.gradle b/build.gradle
index cfdc56dd2..bd4dc9117 100644
--- a/build.gradle
+++ b/build.gradle
@@ -142,6 +142,7 @@ dependencies {
     configurations.all {
         resolutionStrategy {
             force("com.google.guava:guava:32.1.3-jre") // CVE for 31.1
+            force("org.eclipse.platform:org.eclipse.core.runtime:3.29.0") // CVE for 3.26.100
         }
     }
 }