diff --git a/build.gradle b/build.gradle
index dc3c4d2a23..9ae4cdd8d2 100644
--- a/build.gradle
+++ b/build.gradle
@@ -26,6 +26,16 @@ plugins {
   id 'java-platform'
 }
 
+subprojects {
+  repositories {
+    maven {
+      url 'https://packages.scm-manager.org/repository/public/'
+    }
+  }
+
+  apply from: rootProject.file( 'gradle/dependencies.gradle' )
+}
+
 apply from: rootProject.file( 'gradle/dependencies.gradle' )
 
 dependencies {
@@ -106,16 +116,6 @@ dependencies {
   }
 }
 
-subprojects {
-  repositories {
-    maven {
-      url 'https://packages.scm-manager.org/repository/public/'
-    }
-  }
-
-  apply from: rootProject.file( 'gradle/dependencies.gradle' )
-}
-
 // set build props
 project.ext {
   timestamp = new Date().format('yyyyMMddHHmmSS')
diff --git a/scm-webapp/build.gradle b/scm-webapp/build.gradle
index 672dfdeae2..23d853f884 100644
--- a/scm-webapp/build.gradle
+++ b/scm-webapp/build.gradle
@@ -51,7 +51,7 @@ dependencies {
   testImplementation project(':scm-test')
   annotationProcessor project(':scm-annotation-processor')
 
-  // servlet api 
+  // servlet api
   providedCompile libraries.servletApi
   testImplementation libraries.servletApi
 
@@ -127,7 +127,7 @@ dependencies {
   // shiro unit
   testImplementation libraries.shiroUnit
 
-  // rest api client 
+  // rest api client
   // TODO do we need this?
   testImplementation libraries.jerseyClientApi
   testImplementation libraries.jerseyClientRuntime
diff --git a/settings.gradle b/settings.gradle
index f24091f24c..4ac1314bb3 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -24,6 +24,32 @@
 
 rootProject.name = 'scm'
 
+// enfore rules
+// http://kordamp.org/enforcer-gradle-plugin/#_applying_the_plugin
+
+buildscript {
+  repositories {
+    jcenter()
+    gradlePluginPortal()
+  }
+  dependencies {
+    classpath 'org.kordamp.gradle:enforcer-gradle-plugin:0.8.0'
+  }
+}
+apply plugin: 'org.kordamp.gradle.enforcer'
+
+enforce {
+  rule(enforcer.rules.RequireJavaVersion) { r ->
+    r.version = '11.'
+  }
+  rule(enforcer.rules.EnforceBytecodeVersion) { r ->
+    r.maxJdkVersion = '1.8'
+  }
+  rule(enforcer.rules.RequireGradleVersion) { r ->
+    r.version = '6.7'
+  }
+}
+
 includeBuild 'build-plugins'
 include 'scm-annotations'
 include 'scm-annotation-processor'