diff --git a/.github/workflows/mavenwrapper.yml b/.github/workflows/mavenwrapper.yml
new file mode 100644
index 0000000000000..d183706e21cba
--- /dev/null
+++ b/.github/workflows/mavenwrapper.yml
@@ -0,0 +1,37 @@
+# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
+# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+name: Java CI with Maven
+
+on:
+  push:
+    branches: [ "FLINK-33607" ]
+
+jobs:
+  run-maven-wrapper:
+    strategy:
+      matrix:
+        include:
+          - os: 'ubuntu-latest'
+            cmd: './mvnw'
+          - os: 'macos-latest'
+            cmd: './mvnw'
+          - os: 'windows-latest'
+            cmd: './mvnw.cmd'
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout-cone-mode: false
+          sparse-checkout: |
+            .mvn/wrapper/maven-wrapper.properties
+            mvnw
+            mvnw.cmd
+      - name: Print Maven version info
+        run: ${{ matrix.cmd }} --version
diff --git a/.mvn/wrapper/maven-wrapper.properties b/.mvn/wrapper/maven-wrapper.properties
index 20a44b1df3fb5..c18d8cd8a866c 100644
--- a/.mvn/wrapper/maven-wrapper.properties
+++ b/.mvn/wrapper/maven-wrapper.properties
@@ -19,5 +19,4 @@
 distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.8.6/apache-maven-3.8.6-bin.zip
 distributionSha256Sum=ccf20a80e75a17ffc34d47c5c95c98c39d426ca17d670f09cd91e877072a9309
 wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar
-# TODO FLINK-33607: checksum verification doesn't seem to work under windows
-# wrapperSha256Sum=e63a53cfb9c4d291ebe3c2b0edacb7622bbc480326beaa5a0456e412f52f066a
+wrapperSha256Sum=46b0acdfe3da08b3f40d25bd135858b6014ee62b92883768995c946a3b446bd6