diff --git a/.github/workflows/main-build-and-deploy-oss.yml b/.github/workflows/main-build-and-deploy-oss.yml
index e21795f1..bcfc23d4 100644
--- a/.github/workflows/main-build-and-deploy-oss.yml
+++ b/.github/workflows/main-build-and-deploy-oss.yml
@@ -8,10 +8,13 @@ on:
   release:
     types: [ "released" ]
 
+permissions:
+  contents: read
+
 jobs:
 
   update-version:
-    environment: maven-central
+    #environment: maven-central
     runs-on: ubuntu-latest
     #needs: blackduck
     steps:
@@ -86,8 +89,10 @@ jobs:
 
   deploy:
     name: Deploy to Maven Central
+    environment: maven-central
     runs-on: ubuntu-latest
     needs: build
+    timeout-minutes: 30
     steps:
       - name: Download artifact
         uses: actions/download-artifact@v7