diff --git a/.github/workflows/java-ci.yml b/.github/workflows/java-ci.yml
index 6895dc3..aed875e 100644
--- a/.github/workflows/java-ci.yml
+++ b/.github/workflows/java-ci.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       checks: write
-      contents: read
+      contents: write
       issues: read
       pull-requests: write
     steps:
@@ -27,4 +27,4 @@ jobs:
         run: mvn -U -f NSTTutorials/pom.xml clean test -Dgpg.skip=true
       - name: Publish Test Report
         if: ${{ always() }}
-        uses: scacap/action-surefire-report@v1
+        uses: scacap/action-surefire-report@v1.8.0