diff --git a/.ci/build.sh b/.ci/build.sh
index 0bd4581f8c..eb7283cd6b 100755
--- a/.ci/build.sh
+++ b/.ci/build.sh
@@ -133,6 +133,7 @@ function build() {
     pmd_ci_log_group_end
 
     pmd_ci_log_group_start "Executing build with sonar"
+        pmd_ci_openjdk_setdefault 17
         # Note: Sonar also needs GITHUB_TOKEN (!)
         ./mvnw \
             -Dmaven.javadoc.skip=true \
@@ -146,6 +147,7 @@ function build() {
     pmd_ci_log_group_end
 
     pmd_ci_log_group_start "Executing build with coveralls"
+        pmd_ci_openjdk_setdefault 11
         export CI_NAME="github actions"
         export CI_BUILD_URL="${PMD_CI_JOB_URL}"
         export CI_BRANCH="${PMD_CI_BRANCH}"
diff --git a/pom.xml b/pom.xml
index 13069edba6..c991979b5c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1146,6 +1146,10 @@
         </profile>
 
         <profile>
+            <!--
+              Configuration: https://docs.sonarsource.com/sonarcloud/advanced-setup/ci-based-analysis/sonarscanner-for-maven/
+              Report is available here: https://sonarcloud.io/dashboard?id=net.sourceforge.pmd%3Apmd
+            -->
             <id>sonar</id>
             <properties>
                 <sonar.host.url>https://sonarcloud.io</sonar.host.url>
@@ -1158,7 +1162,7 @@
                         <plugin>
                             <groupId>org.sonarsource.scanner.maven</groupId>
                             <artifactId>sonar-maven-plugin</artifactId>
-                            <version>3.7.0.1746</version>
+                            <version>3.10.0.2594</version>
                         </plugin>
                     </plugins>
                 </pluginManagement>