diff --git a/.github/workflows/sca.yml b/.github/workflows/sca.yml
index eb9fee02c6b..3d1318ae81e 100644
--- a/.github/workflows/sca.yml
+++ b/.github/workflows/sca.yml
@@ -28,6 +28,8 @@ jobs:
         uses: shivammathur/setup-php@v2
         with:
           php-version: ${{ matrix.php-version }}
+          coverage: none # without this Xdebug will be enabled
+          tools: cs2pr
 
       - name: Get Composer cache directory
         id: composer-cache
@@ -70,7 +72,7 @@ jobs:
         run: ./dev-tools/check_trailing_spaces.sh
 
       - name: Check - phpstan
-        run: ./dev-tools/vendor/bin/phpstan analyse
+        run: ./dev-tools/vendor/bin/phpstan analyse --error-format=checkstyle | cs2pr
 
       - name: Check - composer-require-checker
         run: ./dev-tools/vendor/bin/composer-require-checker check composer.json --config-file .composer-require-checker.json
diff --git a/dev-tools/composer.json b/dev-tools/composer.json
index c3b703edc63..4efac91cc4c 100644
--- a/dev-tools/composer.json
+++ b/dev-tools/composer.json
@@ -6,12 +6,12 @@
         "ergebnis/composer-normalize": "^2.17.0",
         "humbug/box": "^3.8",
         "humbug/php-scoper": "dev-master#0a4e329 as 0.14.2",
-        "jangregor/phpstan-prophecy": "^0.8.1",
+        "jangregor/phpstan-prophecy": "^1.0",
         "maglnet/composer-require-checker": "3.3.0",
         "mi-schi/phpmd-extension": "^4.3",
         "phpmd/phpmd": "^2.10.2",
-        "phpstan/phpstan": "0.12.96",
-        "phpstan/phpstan-phpunit": "0.12.21"
+        "phpstan/phpstan": "^1.2",
+        "phpstan/phpstan-phpunit": "^1.0"
     },
     "config": {
         "optimize-autoloader": true,