diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 52a366a..61fd4b1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -15,14 +15,6 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
-      - name: Set up JDK 17 for x64
-        uses: actions/setup-java@v3
-        with:
-          java-version: '17'
-          distribution: 'liberica'
-          architecture: x64
-      - name: Maven build
-        run: ./mvnw --batch-mode --update-snapshots verify
       - name: Run Snyk to check for vulnerabilities
         uses: snyk/actions/maven-3-jdk-17@master
         continue-on-error: true # To make sure that SARIF upload gets called
@@ -34,6 +26,14 @@ jobs:
         uses: github/codeql-action/upload-sarif@v2
         with:
           sarif_file: snyk.sarif
+      - name: Set up JDK 17 for x64
+        uses: actions/setup-java@v3
+        with:
+          java-version: '17'
+          distribution: 'liberica'
+          architecture: x64
+      - name: Maven build
+        run: ./mvnw --batch-mode --update-snapshots verify
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with: