diff --git a/.github/workflows/testflight.yml b/.github/workflows/testflight.yml
index e9ac177..932b69f 100644
--- a/.github/workflows/testflight.yml
+++ b/.github/workflows/testflight.yml
@@ -107,12 +107,12 @@ jobs:
 
               // Block fork PRs — untrusted code must not run with privileged credentials
               const baseRepo = `${context.repo.owner}/${context.repo.repo}`;
-              if (pr.data.head.repo.full_name !== baseRepo) {
-                core.info(`PR is from fork ${pr.data.head.repo.full_name} — skipping`);
+              if (pr.head.repo.full_name !== baseRepo) {
+                core.info(`PR is from fork ${pr.head.repo.full_name} — skipping`);
                 return;
               }
 
-              core.setOutput('ref', pr.data.head.sha);
+              core.setOutput('ref', pr.head.sha);
               core.setOutput('should-build', 'true');
               core.setOutput('upload', 'true');