From 6ef28d24d8b1cd31b9aa224d2cb9aef35772bd5d Mon Sep 17 00:00:00 2001
From: Daniel Tomlinson <dtomlinson@panaetius.co.uk>
Date: Wed, 24 Nov 2021 17:58:21 +0000
Subject: [PATCH 1/2] chore: update ok-to-test.yml

---
 .github/workflows/ok-to-test.yml | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/.github/workflows/ok-to-test.yml b/.github/workflows/ok-to-test.yml
index 4af96b6..7d04fee 100644
--- a/.github/workflows/ok-to-test.yml
+++ b/.github/workflows/ok-to-test.yml
@@ -11,17 +11,6 @@ jobs:
     # Only run for PRs, not issue comments
     if: ${{ github.event.issue.pull_request }}
     steps:
-    # Generate a GitHub App installation access token from an App ID and private key
-    # To create a new GitHub App:
-    #   https://developer.github.com/apps/building-github-apps/creating-a-github-app/
-    # See app.yml for an example app manifest
-    - name: Generate token
-      id: generate_token
-      uses: tibdex/github-app-token@v1
-      with:
-        app_id: ${{ secrets.APP_ID }}
-        private_key: ${{ secrets.PRIVATE_KEY }}
-
     - name: Slash Command Dispatch
       uses: peter-evans/slash-command-dispatch@v1
       env:

From b9d86a9635fbab42fa18b2f3a978f4d4568f4b8b Mon Sep 17 00:00:00 2001
From: Daniel Tomlinson <dtomlinson@panaetius.co.uk>
Date: Wed, 24 Nov 2021 18:27:40 +0000
Subject: [PATCH 2/2] chore: update tests.yml action

---
 .github/workflows/tests.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 408af12..82bbcf0 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -62,7 +62,7 @@ jobs:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
   # Repo owner has commented /ok-to-test on a (fork-based) pull request
-  integration-fork:
+  tests-not-trusted:
     runs-on: ubuntu-latest
     if: github.event_name == 'repository_dispatch' &&
       github.event.client_payload.slash_command.sha != '' &&
@@ -74,6 +74,7 @@ jobs:
         with:
           # disable shallow clones for better sonarcloud accuracy
           fetch-depth: 0
+          ref: 'refs/pull/${{ github.event.client_payload.pull_request.number }}/merge'
       - name: Set up Python
         uses: actions/setup-python@v2
         with: