From 74254f10bf332a06a92458c1e5c2645560da77b9 Mon Sep 17 00:00:00 2001
From: Matthias Holzer <83713559+matthiasHOnGithub@users.noreply.github.com>
Date: Thu, 16 Jan 2025 10:03:03 +0100
Subject: [PATCH 1/5] AAE-29930 Fix HQL injection by replacing the querydsl
 package with a patched version of a fork from OpenFeign (#1664)

* switch to patched version of the fork

* update to patched version
---
 .../activiti-cloud-audit-dependencies/pom.xml             | 8 ++++----
 .../activiti-cloud-services-audit-api/pom.xml             | 4 ++--
 .../activiti-cloud-services-audit-model/pom.xml           | 4 ++--
 .../activiti-cloud-starter-audit-consumer/pom.xml         | 2 +-
 .../activiti-cloud-starter-audit-rest/pom.xml             | 2 +-
 .../activiti-cloud-starter-audit/pom.xml                  | 2 +-
 .../dependencies/pom.xml                                  | 8 ++++----
 .../activiti-cloud-query-dependencies/pom.xml             | 8 ++++----
 .../activiti-cloud-services-query-model/pom.xml           | 6 +++---
 .../activiti-cloud-services-query-repo/pom.xml            | 6 +++---
 .../activiti-cloud-services-query-rest/pom.xml            | 6 +++---
 11 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/activiti-cloud-audit-service/activiti-cloud-audit-dependencies/pom.xml b/activiti-cloud-audit-service/activiti-cloud-audit-dependencies/pom.xml
index ec6e92479f8..8293c669c95 100644
--- a/activiti-cloud-audit-service/activiti-cloud-audit-dependencies/pom.xml
+++ b/activiti-cloud-audit-service/activiti-cloud-audit-dependencies/pom.xml
@@ -11,7 +11,7 @@
   <packaging>pom</packaging>
   <name>Activiti Cloud :: Audit Dependencies BOM (Bill Of Materials)</name>
   <properties>
-    <querydsl.version>5.1.0</querydsl.version>
+    <querydsl.version>5.6.1</querydsl.version>
   </properties>
   <dependencyManagement>
     <dependencies>
@@ -92,19 +92,19 @@
         <version>${project.version}</version>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-apt</artifactId>
         <version>${querydsl.version}</version>
         <scope>provided</scope>
         <classifier>jakarta</classifier>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-core</artifactId>
         <version>${querydsl.version}</version>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-jpa</artifactId>
         <version>${querydsl.version}</version>
         <classifier>jakarta</classifier>
diff --git a/activiti-cloud-audit-service/activiti-cloud-services-audit-api/pom.xml b/activiti-cloud-audit-service/activiti-cloud-services-audit-api/pom.xml
index 720d31d3764..ee55d41b421 100644
--- a/activiti-cloud-audit-service/activiti-cloud-services-audit-api/pom.xml
+++ b/activiti-cloud-audit-service/activiti-cloud-services-audit-api/pom.xml
@@ -91,9 +91,9 @@
       <scope>test</scope>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-apt</artifactId>
-      <version>5.1.0</version>
+      <version>5.6.1</version>
       <scope>provided</scope>
       <classifier>jakarta</classifier>
     </dependency>
diff --git a/activiti-cloud-audit-service/activiti-cloud-services-audit-model/pom.xml b/activiti-cloud-audit-service/activiti-cloud-services-audit-model/pom.xml
index 174ab6b5b7d..459de37b203 100644
--- a/activiti-cloud-audit-service/activiti-cloud-services-audit-model/pom.xml
+++ b/activiti-cloud-audit-service/activiti-cloud-services-audit-model/pom.xml
@@ -79,9 +79,9 @@
       <artifactId>hibernate-core</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-apt</artifactId>
-      <version>5.1.0</version>
+      <version>5.6.1</version>
       <scope>provided</scope>
       <classifier>jakarta</classifier>
     </dependency>
diff --git a/activiti-cloud-audit-service/activiti-cloud-starter-audit-consumer/pom.xml b/activiti-cloud-audit-service/activiti-cloud-starter-audit-consumer/pom.xml
index e7a343bec8d..d5889336454 100644
--- a/activiti-cloud-audit-service/activiti-cloud-starter-audit-consumer/pom.xml
+++ b/activiti-cloud-audit-service/activiti-cloud-starter-audit-consumer/pom.xml
@@ -59,7 +59,7 @@
       <artifactId>slf4j-api</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-core</artifactId>
     </dependency>
     <dependency>
diff --git a/activiti-cloud-audit-service/activiti-cloud-starter-audit-rest/pom.xml b/activiti-cloud-audit-service/activiti-cloud-starter-audit-rest/pom.xml
index cdb5fa2c37a..b0025f10ef4 100644
--- a/activiti-cloud-audit-service/activiti-cloud-starter-audit-rest/pom.xml
+++ b/activiti-cloud-audit-service/activiti-cloud-starter-audit-rest/pom.xml
@@ -95,7 +95,7 @@
       <artifactId>slf4j-api</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-core</artifactId>
     </dependency>
     <dependency>
diff --git a/activiti-cloud-audit-service/activiti-cloud-starter-audit/pom.xml b/activiti-cloud-audit-service/activiti-cloud-starter-audit/pom.xml
index c0f2af2ceb6..aa6da0e2ed2 100644
--- a/activiti-cloud-audit-service/activiti-cloud-starter-audit/pom.xml
+++ b/activiti-cloud-audit-service/activiti-cloud-starter-audit/pom.xml
@@ -97,7 +97,7 @@
       <artifactId>slf4j-api</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-core</artifactId>
     </dependency>
     <dependency>
diff --git a/activiti-cloud-notifications-graphql-service/dependencies/pom.xml b/activiti-cloud-notifications-graphql-service/dependencies/pom.xml
index c89d46543af..2d60770fa9b 100644
--- a/activiti-cloud-notifications-graphql-service/dependencies/pom.xml
+++ b/activiti-cloud-notifications-graphql-service/dependencies/pom.xml
@@ -11,7 +11,7 @@
   <artifactId>activiti-cloud-notifications-graphql-dependencies</artifactId>
   <packaging>pom</packaging>
   <properties>
-    <querydsl.version>5.1.0</querydsl.version>
+    <querydsl.version>5.6.1</querydsl.version>
   </properties>
   <dependencyManagement>
     <dependencies>
@@ -66,19 +66,19 @@
         <version>${project.version}</version>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-apt</artifactId>
         <version>${querydsl.version}</version>
         <scope>provided</scope>
         <classifier>jakarta</classifier>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-core</artifactId>
         <version>${querydsl.version}</version>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-jpa</artifactId>
         <version>${querydsl.version}</version>
         <classifier>jakarta</classifier>
diff --git a/activiti-cloud-query-service/activiti-cloud-query-dependencies/pom.xml b/activiti-cloud-query-service/activiti-cloud-query-dependencies/pom.xml
index e948630d539..7c078153c96 100644
--- a/activiti-cloud-query-service/activiti-cloud-query-dependencies/pom.xml
+++ b/activiti-cloud-query-service/activiti-cloud-query-dependencies/pom.xml
@@ -11,7 +11,7 @@
   <packaging>pom</packaging>
   <name>Activiti Cloud :: Query Dependencies BOM (Bill Of Materials)</name>
   <properties>
-    <querydsl.version>5.1.0</querydsl.version>
+    <querydsl.version>5.6.1</querydsl.version>
   </properties>
   <dependencyManagement>
     <dependencies>
@@ -87,19 +87,19 @@
         <version>${project.version}</version>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-apt</artifactId>
         <version>${querydsl.version}</version>
         <scope>provided</scope>
         <classifier>jakarta</classifier>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-core</artifactId>
         <version>${querydsl.version}</version>
       </dependency>
       <dependency>
-        <groupId>com.querydsl</groupId>
+        <groupId>io.github.openfeign.querydsl</groupId>
         <artifactId>querydsl-jpa</artifactId>
         <version>${querydsl.version}</version>
         <classifier>jakarta</classifier>
diff --git a/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-model/pom.xml b/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-model/pom.xml
index 3e799a1298e..12139feca01 100644
--- a/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-model/pom.xml
+++ b/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-model/pom.xml
@@ -68,18 +68,18 @@
       <scope>test</scope>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-apt</artifactId>
       <version>${querydsl.version}</version>
       <scope>provided</scope>
       <classifier>jakarta</classifier>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-core</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-jpa</artifactId>
       <classifier>jakarta</classifier>
       <version>${querydsl.version}</version>
diff --git a/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-repo/pom.xml b/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-repo/pom.xml
index 564c5d6d0c9..58a47617ba4 100644
--- a/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-repo/pom.xml
+++ b/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-repo/pom.xml
@@ -23,18 +23,18 @@
       <artifactId>spring-context</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-apt</artifactId>
       <version>${querydsl.version}</version>
       <scope>provided</scope>
       <classifier>jakarta</classifier>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-core</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-jpa</artifactId>
       <classifier>jakarta</classifier>
     </dependency>
diff --git a/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-rest/pom.xml b/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-rest/pom.xml
index 3f02e2caa60..8e0138009ae 100644
--- a/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-rest/pom.xml
+++ b/activiti-cloud-query-service/activiti-cloud-services-query/activiti-cloud-services-query-rest/pom.xml
@@ -117,18 +117,18 @@
       <artifactId>jackson-annotations</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-apt</artifactId>
       <version>${querydsl.version}</version>
       <scope>provided</scope>
       <classifier>jakarta</classifier>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-core</artifactId>
     </dependency>
     <dependency>
-      <groupId>com.querydsl</groupId>
+      <groupId>io.github.openfeign.querydsl</groupId>
       <artifactId>querydsl-jpa</artifactId>
       <classifier>jakarta</classifier>
     </dependency>

From 39cd0d22f1685567b92669297a85ff66111f0db2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Jan 2025 10:59:15 +0100
Subject: [PATCH 2/5] build(deps): bump actions/setup-java from 4.5.0 to 4.6.0
 (#1653)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/8df1039502a15bceb9433410b1a100fbe190c53b...7a6d8a8234af8eb26422e24e3006232cccaa061b)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Eugenio Romano <eromano@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 2 +-
 .github/workflows/main.yml   | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 50a9da0bcdb..bce39c9d995 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -55,7 +55,7 @@ jobs:
             ${{ runner.os }}-maven-
 
     - name: Set up JDK 21
-      uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
+      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
       with:
        java-version: '21'
        distribution: 'temurin'
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 8377173cd3d..53afa3151fc 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -60,7 +60,7 @@ jobs:
             ${{ runner.os }}-maven-
 
       - name: Setup Java JDK 21
-        uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # 4.5.0
+        uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # 4.6.0
         with:
           java-version: 21
           distribution: 'temurin'
@@ -154,7 +154,7 @@ jobs:
             ${{ runner.os }}-maven-
 
       - name: Setup Java JDK 21
-        uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # 4.5.0
+        uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # 4.6.0
         with:
           java-version: 21
           distribution: 'temurin'
@@ -327,7 +327,7 @@ jobs:
           token: ${{ secrets.BOT_GITHUB_TOKEN }}
 
       - name: Setup Java JDK 21
-        uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
+        uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
         with:
           java-version: 21
           distribution: 'temurin'

From 76ef86416b093acc604b0d7329512aa609c5ed89 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Jan 2025 10:59:35 +0100
Subject: [PATCH 3/5] build(deps): bump github/codeql-action from 3.27.6 to
 3.28.1 (#1661)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.6 to 3.28.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/aa578102511db1f4524ed59b8cc2bae4f6e88195...b6a472f63d85b9c78a3ac5e89422239fc15e9b3c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index bce39c9d995..9a906789fff 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -62,7 +62,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+      uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -98,6 +98,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+      uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
       with:
         category: "/language:${{matrix.language}}"

From 56151929fb4d5fa02b19c51596c61d48674906db Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Jan 2025 10:59:47 +0100
Subject: [PATCH 4/5] build(deps): bump actions/cache from 4.1.2 to 4.2.0
 (#1634)

Bumps [actions/cache](https://github.com/actions/cache) from 4.1.2 to 4.2.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/6849a6489940f00c2f30c0fb92c6274307ccb58a...1bd1e32a3bdc45362d1e726936510720a7c30a57)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 2 +-
 .github/workflows/main.yml   | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9a906789fff..85c757e31af 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -47,7 +47,7 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-    - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+    - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
       with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 53afa3151fc..c286c4e7cfb 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -52,7 +52,7 @@ jobs:
         with:
           token: ${{ secrets.BOT_GITHUB_TOKEN }}
 
-      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+      - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -146,7 +146,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+      - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -332,7 +332,7 @@ jobs:
           java-version: 21
           distribution: 'temurin'
 
-      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
+      - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

From f415c5fede1b1069464af650737fb02c4bcc99d6 Mon Sep 17 00:00:00 2001
From: Wojtek Piotrowiak <wojciech-piotrowiak@users.noreply.github.com>
Date: Thu, 16 Jan 2025 15:02:03 +0100
Subject: [PATCH 5/5] AAE-22940 Sonar coverage enabled (#1648)

AAE-22940 Sonar coverage enabled
---
 .github/workflows/main.yml                    |   9 +-
 activiti-cloud-coverage/pom.xml               | 506 ++++++++++++++++++
 .../dependencies/pom.xml                      |   5 +
 pom.xml                                       |   8 +
 4 files changed, 527 insertions(+), 1 deletion(-)
 create mode 100644 activiti-cloud-coverage/pom.xml

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c286c4e7cfb..5af38c55707 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -87,13 +87,20 @@ jobs:
           echo "testcontainers.reuse.enable=true" > ~/.testcontainers.properties
           echo "TESTCONTAINERS_RYUK_DISABLED=true" >> $GITHUB_ENV
 
+      - name: Set SONAR_SCANNER_OPTS
+        shell: bash
+        run: |
+          echo "JACOCO_REPORT_PATH=${{ github.workspace }}/activiti-cloud-coverage/target/site/jacoco-aggregate/jacoco.xml" >> $GITHUB_ENV
+          echo "SONAR_SCANNER_OPTS=sonar:sonar -Dsonar.host.url='https://sonarcloud.io' -Dsonar.organization='activiti' -Dsonar.projectKey='Activiti_activiti-cloud' -Dsonar.coverage.jacoco.xmlReportPaths=${{ env.JACOCO_REPORT_PATH }}" >> $GITHUB_ENV
+
       - name: Maven Build and Test
         shell: bash
-        run: mvn -DskipAcceptanceTests=true -DunitTests.parallel=true -T 1C install ${{ env.MAVEN_CLI_OPTS}}
+        run: mvn -DskipAcceptanceTests=true -DunitTests.parallel=true -T 1C install ${{ env.MAVEN_CLI_OPTS}} ${{ env.SONAR_SCANNER_OPTS }}
         env:
           MAVEN_CLI_OPTS: --show-version --no-transfer-progress --settings settings.xml
           MAVEN_USERNAME: ${{ secrets.NEXUS_USERNAME }}
           MAVEN_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
       - name: Remove running docker containers
         run: docker rm -f $(docker ps -a -q)
diff --git a/activiti-cloud-coverage/pom.xml b/activiti-cloud-coverage/pom.xml
new file mode 100644
index 00000000000..e0b7fb0fd23
--- /dev/null
+++ b/activiti-cloud-coverage/pom.xml
@@ -0,0 +1,506 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+  <modelVersion>4.0.0</modelVersion>
+  <parent>
+    <groupId>org.activiti.cloud</groupId>
+    <artifactId>activiti-cloud-mono-aggregator</artifactId>
+    <version>8.7.0-SNAPSHOT</version>
+  </parent>
+
+  <artifactId>activiti-cloud-coverage</artifactId>
+  <name>Aggregate Coverage Report</name>
+  <packaging>pom</packaging>
+
+  <dependencyManagement>
+    <dependencies>
+      <dependency>
+        <groupId>org.activiti.cloud</groupId>
+        <artifactId>activiti-cloud-dependencies-parent</artifactId>
+        <version>${project.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.activiti.cloud</groupId>
+        <artifactId>activiti-cloud-runtime-bundle-dependencies</artifactId>
+        <version>${project.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.activiti.cloud</groupId>
+        <artifactId>activiti-cloud-connectors-dependencies</artifactId>
+        <version>${project.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.activiti.cloud</groupId>
+        <artifactId>activiti-cloud-audit-dependencies</artifactId>
+        <version>${project.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.activiti.cloud</groupId>
+        <artifactId>activiti-cloud-messages-dependencies</artifactId>
+        <version>${project.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.activiti.cloud</groupId>
+        <artifactId>activiti-cloud-notifications-graphql-dependencies</artifactId>
+        <version>${project.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.activiti.cloud</groupId>
+        <artifactId>activiti-cloud-examples</artifactId>
+        <version>${project.version}</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+    </dependencies>
+  </dependencyManagement>
+
+
+  <dependencies>
+    <!-- Parent directory: activiti-cloud-connectors -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-connector</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-connectors -->
+    <!-- Parent directory: activiti-cloud-messages-service/starters -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-messages-redis</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-messages-service/starters -->
+    <!-- Parent directory: activiti-cloud-messages-service/starters -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-messages-jdbc</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-messages-service/starters -->
+    <!-- Parent directory: activiti-cloud-messages-service/starters -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-messages-hazelcast</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-messages-service/starters -->
+    <!-- Parent directory: activiti-cloud-messages-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-messages-integration-tests</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-messages-service -->
+    <!-- Parent directory: activiti-cloud-messages-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-messages-core</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-messages-service/services -->
+    <!-- Parent directory: activiti-cloud-messages-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-messages-tests</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-messages-service/services -->
+    <!-- Parent directory: activiti-cloud-api -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-api-task-model-impl</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-api -->
+    <!-- Parent directory: activiti-cloud-api -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-api-process-model-impl</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-api -->
+    <!-- Parent directory: activiti-cloud-api -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-api-events</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-api -->
+    <!-- Parent directory: activiti-cloud-audit-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-audit-consumer</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-audit-service -->
+    <!-- Parent directory: activiti-cloud-audit-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-audit-rest</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-audit-service -->
+    <!-- Parent directory: activiti-cloud-audit-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-audit-liquibase</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-audit-service -->
+    <!-- Parent directory: activiti-cloud-audit-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-audit-model</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-audit-service -->
+    <!-- Parent directory: activiti-cloud-audit-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-audit</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-audit-service -->
+    <!-- Parent directory: activiti-cloud-audit-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-audit-consumer</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-audit-service -->
+    <!-- Parent directory: activiti-cloud-audit-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-audit-api</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-audit-service -->
+    <!-- Parent directory: activiti-cloud-audit-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-audit-rest</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-audit-service -->
+    <!-- Parent directory: activiti-cloud-query-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-query-consumer</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service -->
+    <!-- Parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-query-repo</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <!-- Parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-query-liquibase</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <!-- Parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-query-rest</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <!-- Parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-query-model</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <!-- Parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-query-consumer</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <!-- Parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-query-events</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service/activiti-cloud-services-query -->
+    <!-- Parent directory: activiti-cloud-query-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-query-rest</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service -->
+    <!-- Parent directory: activiti-cloud-query-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-query</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-query-service -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-metadata</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-common-identity-keycloak</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-common-security</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-test-containers</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-common-util</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-dbp-rest</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-service-messaging-starter</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-swagger</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-common-security-keycloak</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-service-common-config</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-service-common -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-service-messaging-config</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-service-common -->
+    <!-- Parent directory: activiti-cloud-acceptance-scenarios -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>security-policies-acceptance-tests</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-acceptance-scenarios -->
+    <!-- Parent directory: activiti-cloud-acceptance-scenarios -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>identity-adapter-acceptance-tests</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-acceptance-scenarios -->
+    <!-- Parent directory: activiti-cloud-acceptance-scenarios -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>multiple-runtime-acceptance-tests</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-acceptance-scenarios -->
+    <!-- Parent directory: activiti-cloud-acceptance-scenarios -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>runtime-acceptance-tests</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-acceptance-scenarios -->
+    <!-- Parent directory: activiti-cloud-examples/example-runtime-bundle -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>example-runtime-bundle-starter</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-examples/example-runtime-bundle -->
+    <!-- Parent directory: activiti-cloud-examples/example-cloud-connector -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>example-cloud-connector-starter</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-examples/example-cloud-connector -->
+    <!-- Parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-query-config</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <!-- Parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-query-starter</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <!-- Parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-query-starter-consumer</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <!-- Parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-query-liquibase</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <!-- Parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-query-starter-rest</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-examples/activiti-cloud-query -->
+    <!-- Parent directory: activiti-cloud-examples -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-identity-adapter</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-examples -->
+    <!-- Parent directory: activiti-cloud-runtime-bundle-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-runtime-bundle-it</artifactId>
+      <version>${project.version}</version>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-runtime-bundle-service -->
+    <!-- Parent directory: activiti-cloud-runtime-bundle-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-runtime-bundle</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-runtime-bundle-service -->
+    <!-- Parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-events</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <!-- Parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-connectors</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <!-- Parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-runtime-gateway</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <!-- Parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-core</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <!-- Parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-rest-impl</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <!-- Parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-identity-basic</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-runtime-bundle-service/activiti-cloud-services-runtime-bundle -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-starter-notifications-graphql</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-notifications-graphql-security</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-notifications-graphql-web</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-notifications-graphql-graphiql</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-notifications-graphql-subscriptions</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-notifications-graphql-schema</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-notifications-graphql-events</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-notifications-graphql-ws</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <!-- Parent directory: activiti-cloud-notifications-graphql-service/services -->
+    <dependency>
+      <groupId>org.activiti.cloud</groupId>
+      <artifactId>activiti-cloud-services-notifications-graphql-jpa-query</artifactId>
+    </dependency>
+    <!-- End of parent directory: activiti-cloud-notifications-graphql-service/services -->
+
+  </dependencies>
+
+  <build>
+    <plugins>
+      <plugin>
+        <groupId>org.jacoco</groupId>
+        <artifactId>jacoco-maven-plugin</artifactId>
+        <executions>
+          <execution>
+            <id>jacoco-report-aggregate</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>report-aggregate</goal>
+            </goals>
+          </execution>
+        </executions>
+      </plugin>
+    </plugins>
+  </build>
+
+</project>
diff --git a/activiti-cloud-messages-service/dependencies/pom.xml b/activiti-cloud-messages-service/dependencies/pom.xml
index d53291e628a..7a818e8b48c 100644
--- a/activiti-cloud-messages-service/dependencies/pom.xml
+++ b/activiti-cloud-messages-service/dependencies/pom.xml
@@ -42,6 +42,11 @@
         <artifactId>activiti-cloud-starter-messages-redis</artifactId>
         <version>${project.version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.activiti.cloud</groupId>
+        <artifactId>activiti-cloud-starter-messages-hazelcast</artifactId>
+        <version>${project.version}</version>
+      </dependency>
     </dependencies>
   </dependencyManagement>
 </project>
diff --git a/pom.xml b/pom.xml
index 743da57db65..40f887e8199 100644
--- a/pom.xml
+++ b/pom.xml
@@ -168,6 +168,7 @@
     <module>activiti-cloud-acceptance-scenarios</module>
     <module>activiti-cloud-examples</module>
     <module>activiti-cloud-dependencies</module>
+    <module>activiti-cloud-coverage</module>
   </modules>
   <scm>
     <url>http://github.com/${project.scm.organization}/${project.scm.repository}</url>
@@ -522,6 +523,13 @@ limitations under the License.]]>
               <goal>report-integration</goal>
             </goals>
           </execution>
+          <execution>
+            <id>report-aggregate</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>report-aggregate</goal>
+            </goals>
+          </execution>
         </executions>
       </plugin>
       <plugin>