diff --git a/.github/workflows/build-yocto.yml b/.github/workflows/build-yocto.yml
index 2120182cc..98ae771f0 100644
--- a/.github/workflows/build-yocto.yml
+++ b/.github/workflows/build-yocto.yml
@@ -73,7 +73,6 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-          ref: ${{ inputs.git_ref }}
 
       - name: Download kas lockfile
         uses: actions/download-artifact@v7
diff --git a/.github/workflows/test-distro.yml b/.github/workflows/test-distro.yml
index a487bbce4..031de0726 100644
--- a/.github/workflows/test-distro.yml
+++ b/.github/workflows/test-distro.yml
@@ -24,6 +24,10 @@ on:
         required: false
         type: string
         description: "Suffix for the distro name"
+      git_ref:
+        required: true
+        type: string
+        description: "Ref in the repo which should be used for the tests"
       lava_test_plans_ref:
         type: string
         description: "Ref in lava-test-plans repository: commit, tag or branch"
@@ -43,7 +47,7 @@ on:
 
 jobs:
   prepare-boot-jobs:
-    name: "Prepare boot jobs for ${{ inputs.distro }}"
+    name: "Prepare boot jobs for ${{ inputs.distro_name }}"
     runs-on: ubuntu-latest
     outputs:
       jobmatrix: ${{ steps.lava-test-plans.outputs.jobmatrix }}
@@ -53,6 +57,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
+          ref: ${{ inputs.git_ref }}
 
       - name: Run lava-test-plans
         id: lava-test-plans
@@ -152,7 +158,7 @@ jobs:
           echo "boot_result=$BOOT_RESULT" >> "$GITHUB_OUTPUT"
 
   prepare-premerge-jobs:
-    name: "Prepare pre-merge jobs for ${{ inputs.distro }}"
+    name: "Prepare pre-merge jobs for ${{ inputs.distro_name }}"
     runs-on: ubuntu-latest
     needs: boot-job-result
     # run only if boot jobs are successful
@@ -167,6 +173,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
+          ref: ${{ inputs.git_ref }}
 
       - name: Determine device list
         id: determine-device-list
@@ -250,6 +258,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          persist-credentials: false
+          ref: ${{ inputs.git_ref }}
 
       - name: Generate Summary
         id: generate-summary
diff --git a/.github/workflows/test-pr.yml b/.github/workflows/test-pr.yml
index ef6d92d43..d07a4b7f1 100644
--- a/.github/workflows/test-pr.yml
+++ b/.github/workflows/test-pr.yml
@@ -21,6 +21,7 @@ jobs:
     secrets: inherit
     with:
       build_id: ${{ github.event.workflow_run.id }}
+      git_ref: ${{ github.event.workflow_run.head_sha }}
 
   comment-on-pr:
     name: "Comment on PR"
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 2f836e4b1..36d751c0d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -6,6 +6,11 @@ on:
       build_id:
         required: true
         type: string
+      git_ref:
+        required: false
+        default: ''
+        type: string
+        description: "Ref in the repo which should be used for the tests"
     outputs:
       summary_ids:
         description: "IDs of the test summary artifact"