diff --git a/.github/workflows/myfaces-ci.yml b/.github/workflows/myfaces-ci.yml
new file mode 100644
index 0000000..043d8fd
--- /dev/null
+++ b/.github/workflows/myfaces-ci.yml
@@ -0,0 +1,69 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+#
+
+# NOTE https://infra.apache.org/github-actions-secrets.html
+
+name: MyFaces CI
+
+on:
+  push:
+    branches:
+      - master
+      - 3.0.x
+      - 2.3-next
+      - 2.3.x
+  pull_request:
+    branches:
+      - master
+      - 3.0.x
+      - 2.3-next
+      - 2.3.x
+  workflow_dispatch:
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+      - name: Set up JDK 1.8
+        uses: actions/setup-java@v1
+        with:
+          java-version: 1.8
+      - name: Cache Maven packages
+        uses: actions/cache@v2
+        with:
+          path: ~/.m2
+          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
+          restore-keys: ${{ runner.os }}-m2
+      - name: Build with Maven
+        run: |
+          if ! mvn -B clean checkstyle:check org.apache.rat:apache-rat-plugin:check verify -Dformats=XML -f pom.xml; then
+            find . \( -path '*/target/surefire-reports/*.xml' -o -path '*/target/failsafe-reports/*.xml' -o -path '*/target/rat.txt' -o -path '*/target/checkstyle-result.xml' -o -path '*/target/dependency-check-report.xml' \) | zip -q reports.zip -@
+            exit 1
+          fi
+
+      - name:  Reports
+        uses: actions/upload-artifact@v2
+        if: failure()
+        with:
+          name: reports
+          retention-days: 14
+          path: reports.zip
+          if-no-files-found: ignore
\ No newline at end of file
diff --git a/impl/src/main/java/org/apache/myfaces/push/cdi/WebsocketChannelTokenBuilderBean.java b/impl/src/main/java/org/apache/myfaces/push/cdi/WebsocketChannelTokenBuilderBean.java
index a748204..c84702c 100644
--- a/impl/src/main/java/org/apache/myfaces/push/cdi/WebsocketChannelTokenBuilderBean.java
+++ b/impl/src/main/java/org/apache/myfaces/push/cdi/WebsocketChannelTokenBuilderBean.java
@@ -41,7 +41,8 @@
 
     private static final String RANDOM_KEY_IN_WEBSOCKET_SESSION_TOKEN_SECURE_RANDOM = "secureRandom";
     private static final String RANDOM_KEY_IN_WEBSOCKET_SESSION_TOKEN_RANDOM = "random";
-    private static final String RANDOM_KEY_IN_WEBSOCKET_SESSION_TOKEN_PARAM_DEFAULT = RANDOM_KEY_IN_WEBSOCKET_SESSION_TOKEN_SECURE_RANDOM;
+    private static final String RANDOM_KEY_IN_WEBSOCKET_SESSION_TOKEN_PARAM_DEFAULT
+            = RANDOM_KEY_IN_WEBSOCKET_SESSION_TOKEN_SECURE_RANDOM;
 
     private CsrfSessionTokenFactory csrfSessionTokenFactory;
     
diff --git a/pom.xml b/pom.xml
index 0831632..4537549 100644
--- a/pom.xml
+++ b/pom.xml
@@ -97,6 +97,9 @@
                 <artifactId>apache-rat-plugin</artifactId>
                 <configuration>
                     <excludes>
+                        <exclude>**/README.md</exclude>
+                        <exclude>**/target/**/*</exclude>
+                        <exclude>**/*.iml</exclude>
                         <!-- This file is created during a release and needs no licensing text -->
                         <exclude>DEPENDENCIES</exclude>
                     </excludes>