diff --git a/.github/scripts/check-dirty-workspace.sh b/.github/scripts/check-dirty-workspace.sh
new file mode 100755
index 0000000000..365d563fc2
--- /dev/null
+++ b/.github/scripts/check-dirty-workspace.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+DIRTY=$(git status --porcelain)
+if [ -n "$DIRTY" ]; then
+  echo "::error title=Dirty workspace::Build modified files. Please run the build locally and commit all the changes."
+  echo "$DIRTY" | while IFS= read -r line; do
+    file="${line:3}"
+    echo "::error file=$file,title=Unexpected change::This file was modified or created by the build"
+  done
+  exit 1
+fi
diff --git a/.github/workflows/async.yml b/.github/workflows/async.yml
index 8cad35dc89..7e50543c71 100644
--- a/.github/workflows/async.yml
+++ b/.github/workflows/async.yml
@@ -46,3 +46,6 @@ jobs:
     - name: Build async
       shell: bash
       run: mvn -U -e -B -ntp clean install -f async
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/blueprint-maven-plugin.yml b/.github/workflows/blueprint-maven-plugin.yml
index 05d8a18b5b..a890f9dffe 100644
--- a/.github/workflows/blueprint-maven-plugin.yml
+++ b/.github/workflows/blueprint-maven-plugin.yml
@@ -49,3 +49,6 @@ jobs:
     - name: Build blueprint plugin
       shell: bash
       run: mvn -U -e -B -ntp clean install -f blueprint-maven-plugin
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/blueprint.yml b/.github/workflows/blueprint.yml
index cab73b39c7..dcf87a464f 100644
--- a/.github/workflows/blueprint.yml
+++ b/.github/workflows/blueprint.yml
@@ -69,3 +69,6 @@ jobs:
     - name: Build blueprint
       shell: bash
       run: mvn -U -e -B -ntp clean install -f blueprint
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/esa-ant-task.yml b/.github/workflows/esa-ant-task.yml
index 274c8432ee..2271d24bb6 100644
--- a/.github/workflows/esa-ant-task.yml
+++ b/.github/workflows/esa-ant-task.yml
@@ -46,3 +46,6 @@ jobs:
     - name: Build esa-ant-task
       shell: bash
       run: mvn -U -e -B -ntp clean install -f esa-ant-task
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/esa-maven-plugin.yml b/.github/workflows/esa-maven-plugin.yml
index bf8464e2f2..eb4defed7b 100644
--- a/.github/workflows/esa-maven-plugin.yml
+++ b/.github/workflows/esa-maven-plugin.yml
@@ -46,3 +46,6 @@ jobs:
     - name: Build esa-maven-plugin
       shell: bash
       run: mvn -U -e -B -ntp clean install -f esa-maven-plugin -P run-its
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/jmx.yml b/.github/workflows/jmx.yml
index 0083ceddcd..6173631d40 100644
--- a/.github/workflows/jmx.yml
+++ b/.github/workflows/jmx.yml
@@ -73,3 +73,6 @@ jobs:
     - name: Build jmx
       shell: bash
       run: mvn -U -e -B -ntp clean install -f jmx
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/jndi.yml b/.github/workflows/jndi.yml
index eadcc7f419..411edadd9b 100644
--- a/.github/workflows/jndi.yml
+++ b/.github/workflows/jndi.yml
@@ -61,3 +61,6 @@ jobs:
     - name: Build jndi
       shell: bash
       run: mvn -U -e -B -ntp clean install -f jndi
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/pmd.yml b/.github/workflows/pmd.yml
index e8485dd2e8..2991c56809 100644
--- a/.github/workflows/pmd.yml
+++ b/.github/workflows/pmd.yml
@@ -49,3 +49,6 @@ jobs:
       uses: jwgmeligmeyling/pmd-github-action@322e346bd76a0757c4d54ff9209e245965aa066d
       with:
         path: '**/pmd.xml'
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/proxy.yml b/.github/workflows/proxy.yml
index d87d53afd9..4668912fe6 100644
--- a/.github/workflows/proxy.yml
+++ b/.github/workflows/proxy.yml
@@ -67,3 +67,6 @@ jobs:
     - name: Build proxy
       shell: bash
       run: mvn -V -U -e -B -ntp clean install -f proxy
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/pushstream.yml b/.github/workflows/pushstream.yml
index 2e67ee63de..f72df645df 100644
--- a/.github/workflows/pushstream.yml
+++ b/.github/workflows/pushstream.yml
@@ -46,3 +46,6 @@ jobs:
     - name: Build pushstream
       shell: bash
       run: mvn -U -e -B -ntp clean install -f pushstream
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/quiesce.yml b/.github/workflows/quiesce.yml
index cabb12b7cd..a59ad6fdb3 100644
--- a/.github/workflows/quiesce.yml
+++ b/.github/workflows/quiesce.yml
@@ -67,3 +67,6 @@ jobs:
     - name: Build quiesce
       shell: bash
       run: mvn -V -U -e -B -ntp clean install -f quiesce
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/samples.yml b/.github/workflows/samples.yml
index b3a3a6c204..52029929f6 100644
--- a/.github/workflows/samples.yml
+++ b/.github/workflows/samples.yml
@@ -56,3 +56,6 @@ jobs:
     - name: Run idverifier
       shell: bash
       run: timeout --preserve-status 10 bash ./samples/blueprint/idverifier/idverifier-assembly/target/run.sh || exit 0
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/spi-fly.yml b/.github/workflows/spi-fly.yml
index 0f9427d98a..02368e3b45 100644
--- a/.github/workflows/spi-fly.yml
+++ b/.github/workflows/spi-fly.yml
@@ -50,3 +50,6 @@ jobs:
     - name: Build spi-fly
       shell: bash
       run: mvn -U -e -B -ntp clean install -f spi-fly
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/subsystem.yml b/.github/workflows/subsystem.yml
index 66791e86e4..958706b475 100644
--- a/.github/workflows/subsystem.yml
+++ b/.github/workflows/subsystem.yml
@@ -73,3 +73,6 @@ jobs:
     - name: Build subsystem
       shell: bash
       run: mvn -U -e -B -ntp clean install -f subsystem
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/testsupport.yml b/.github/workflows/testsupport.yml
index 3234f15099..7db464d65e 100644
--- a/.github/workflows/testsupport.yml
+++ b/.github/workflows/testsupport.yml
@@ -46,3 +46,6 @@ jobs:
     - name: Build testsupport
       shell: bash
       run: mvn -U -e -B -ntp clean install -f testsupport
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/transaction.yml b/.github/workflows/transaction.yml
index 1fd96f9547..24679d2b71 100644
--- a/.github/workflows/transaction.yml
+++ b/.github/workflows/transaction.yml
@@ -53,3 +53,6 @@ jobs:
     - name: Build transaction
       shell: bash
       run: mvn -U -e -B -ntp clean install -f transaction
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/tutorials.yml b/.github/workflows/tutorials.yml
index 6956491219..83ca7a0d4b 100644
--- a/.github/workflows/tutorials.yml
+++ b/.github/workflows/tutorials.yml
@@ -49,3 +49,6 @@ jobs:
     - name: Build tutorials
       shell: bash
       run: mvn -U -e -B -ntp clean install -f tutorials
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/util.yml b/.github/workflows/util.yml
index acd307988a..4d3fc9d44e 100644
--- a/.github/workflows/util.yml
+++ b/.github/workflows/util.yml
@@ -59,3 +59,6 @@ jobs:
     - name: Build util
       shell: bash
       run: mvn -V -U -e -B -ntp clean install -f util
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/versioning.yml b/.github/workflows/versioning.yml
index 71131e1293..a8f11d5f8e 100644
--- a/.github/workflows/versioning.yml
+++ b/.github/workflows/versioning.yml
@@ -62,3 +62,6 @@ jobs:
     - name: Build versioning
       shell: bash
       run: mvn -U -e -B -ntp clean install -f versioning
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.github/workflows/web.yml b/.github/workflows/web.yml
index 5e0ae71013..d90337015b 100644
--- a/.github/workflows/web.yml
+++ b/.github/workflows/web.yml
@@ -67,3 +67,6 @@ jobs:
     - name: Build web
       shell: bash
       run: mvn -V -U -e -B -ntp clean install -f web
+    - name: Check for dirty workspace
+      shell: bash
+      run: bash .github/scripts/check-dirty-workspace.sh
diff --git a/.gitignore b/.gitignore
index 2114252e53..f0a3302218 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,4 +7,5 @@ velocity.log
 *.iml
 .factorypath
 .vscode
-.flattened-pom.xml
\ No newline at end of file
+.flattened-pom.xml
+dependency-reduced-pom.xml