diff --git a/.github/workflows/maven-build.yml b/.github/workflows/maven-build.yml
index 4718a6ce5..a1eb191d6 100644
--- a/.github/workflows/maven-build.yml
+++ b/.github/workflows/maven-build.yml
@@ -27,3 +27,12 @@ jobs:
           cache: maven
       - name: Build with Maven Wrapper
         run: ./mvnw -B package
+
+      - name: SonarQube Scan
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed for PR decoration
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}    # SonarQube authentication token
+        run: ./mvnw sonar:sonar \
+          -Dsonar.projectKey=maven-java \
+          -Dsonar.host.url=http://localhost:9000 \
+          -Dsonar.login=${{ secrets.SONAR_TOKEN }}