diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1dd7ba2a..6e10487c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,7 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- update developers list
+- update developers list + update maven plugins versions
 
 ### Deleted
 
diff --git a/pom.xml b/pom.xml
index bd13aff1..0dcd48db 100644
--- a/pom.xml
+++ b/pom.xml
@@ -137,6 +137,16 @@
     </properties>
 
     <build>
+        <pluginManagement>
+            <plugins>
+                <!-- TO KEEP : to fix sonar plugin version for CICD and execute sonar:sonar on github CI -->
+                <plugin>
+                    <groupId>org.sonarsource.scanner.maven</groupId>
+                    <artifactId>sonar-maven-plugin</artifactId>
+                    <version>5.0.0.4389</version>
+                </plugin>
+            </plugins>
+        </pluginManagement>
         <plugins>
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
@@ -367,7 +377,7 @@
                         </configuration>
                     </execution>
                 </executions>
-            </plugin>
+            </plugin>s
         </plugins>
     </build>
 
@@ -425,6 +435,7 @@
                         -->
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-gpg-plugin</artifactId>
+                        <version>3.2.7</version>
                         <executions>
                             <execution>
                                 <id>sign-artifacts</id>