diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d5f896a0..ba36c761 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -14,6 +14,11 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
         java: [ '11', '17', '21' ]
+        include:
+          # lengthy build steps should only be performed on linux with Java 17 (Sonarcloud analysis, deployment)
+          - os: ubuntu-latest
+            java: '17'
+            isMainBuildEnv: true
       fail-fast: false
 
     runs-on: ${{ matrix.os }}
@@ -27,5 +32,12 @@ jobs:
           cache: 'maven'
 
       - name: Build with Maven
+        if: '!matrix.isMainBuildEnv'
         run: ./mvnw verify -e -B -V
 
+      - name: Build with Maven (incl. Sonarcloud analysis)
+        if: 'matrix.isMainBuildEnv'
+        env: 
+          # SonarCloud access token and project coordinates provided in context of https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/issues/4700
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+        run: ./mvnw verify -Pcode-coverage -e -B -V org.sonarsource.scanner.maven:sonar-maven-plugin:4.0.0.4121:sonar -Dsonar.host.url=https://sonarcloud.io -Dsonar.projectKey=org.eclipse.sisu:sisu-inject -Dsonar.organization=eclipse
diff --git a/pom.xml b/pom.xml
index e3359c44..ea92a0d5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -624,10 +624,6 @@ Bundle-DocURL: http://www.eclipse.org/sisu/
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-enforcer-plugin</artifactId>
       </plugin>
-      <plugin>
-        <groupId>org.jacoco</groupId>
-        <artifactId>jacoco-maven-plugin</artifactId>
-      </plugin>
     </plugins>
   </build>
 
@@ -689,5 +685,16 @@ Bundle-DocURL: http://www.eclipse.org/sisu/
         </plugins>
       </build>
     </profile>
+    <profile>
+      <id>code-coverage</id>
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.jacoco</groupId>
+            <artifactId>jacoco-maven-plugin</artifactId>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
   </profiles>
 </project>