diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0528e45..e90d94a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -62,18 +62,30 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      security-events: write
     steps:
       - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          java-version: "17"
+          distribution: temurin
+          cache: maven
+      - name: Resolve Maven dependencies for Trivy
+        working-directory: backend
+        run: mvn --batch-mode dependency:resolve
       - name: Trivy filesystem gate
         uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
         with:
           scan-type: fs
           scan-ref: .
+          scanners: vuln,secret
+          skip-dirs: frontend/node_modules,backend/target,frontend/dist,frontend/coverage
+          cache-dir: /tmp/trivy-cache
+          timeout: 10m
           severity: HIGH,CRITICAL
           ignore-unfixed: true
           exit-code: "1"
       - name: Gitleaks current tree secret scan
+        if: always()
         run: docker run --rm -v "$PWD:/repo" zricethezav/gitleaks:v8.30.1 detect --source=/repo --no-git --redact --verbose
 
   docker-demo-smoke:
diff --git a/backend/pom.xml b/backend/pom.xml
index 1d46771..3f081d5 100644
--- a/backend/pom.xml
+++ b/backend/pom.xml
@@ -5,7 +5,7 @@
 	<parent>
 		<groupId>org.springframework.boot</groupId>
 		<artifactId>spring-boot-starter-parent</artifactId>
-		<version>3.2.0</version>
+		<version>3.5.14</version>
 		<relativePath/>
 	</parent>
 	<groupId>com.codesage</groupId>
@@ -16,6 +16,10 @@
 	<properties>
 		<java.version>17</java.version>
 		<lombok.version>1.18.42</lombok.version>
+		<netty.version>4.1.135.Final</netty.version>
+		<postgresql.version>42.7.11</postgresql.version>
+		<testcontainers.version>1.21.4</testcontainers.version>
+		<tomcat.version>10.1.55</tomcat.version>
 	</properties>
 	<dependencies>
 		<!-- Spring Boot Starters -->
@@ -106,7 +110,7 @@
 		<dependency>
 			<groupId>org.testcontainers</groupId>
 			<artifactId>testcontainers</artifactId>
-			<version>1.19.3</version>
+			<version>${testcontainers.version}</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
@@ -117,13 +121,13 @@
 		<dependency>
 			<groupId>org.testcontainers</groupId>
 			<artifactId>postgresql</artifactId>
-			<version>1.19.3</version>
+			<version>${testcontainers.version}</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>
 			<groupId>org.testcontainers</groupId>
 			<artifactId>rabbitmq</artifactId>
-			<version>1.19.3</version>
+			<version>${testcontainers.version}</version>
 			<scope>test</scope>
 		</dependency>
 		<dependency>