diff --git a/mbed-tls-pr-head.yaml b/mbed-tls-pr-head.yaml
index 3eba5a9..1af2dd7 100644
--- a/mbed-tls-pr-head.yaml
+++ b/mbed-tls-pr-head.yaml
@@ -38,7 +38,7 @@
         discover-pr-forks-strategy: both
         discover-pr-forks-trust: permission
         discover-pr-origin: both
-        head-filter-regex: '(?!^PR-(1824)-(merge|head)$)(PR-\d+-head)'
+        head-filter-regex: '(?!^PR-(7958|7959)-(head)$)(PR-\d+-head)'
         property-strategies:
           all-branches:
           - pipeline-branch-durability-override: performance-optimized
diff --git a/mbed-tls-pr-merge.yaml b/mbed-tls-pr-merge.yaml
index 1441477..521ab92 100644
--- a/mbed-tls-pr-merge.yaml
+++ b/mbed-tls-pr-merge.yaml
@@ -38,7 +38,7 @@
         discover-pr-forks-strategy: both
         discover-pr-forks-trust: permission
         discover-pr-origin: both
-        head-filter-regex: '(?!^PR-(1824)-(merge|head)$)(PR-\d+-merge)'
+        head-filter-regex: '(?!^PR-(7958|7959)-(merge|head)$)(PR-\d+-merge)'
         property-strategies:
           all-branches:
           - pipeline-branch-durability-override: performance-optimized
diff --git a/mbed-tls-restricted-pr-ci-testing.yaml b/mbed-tls-restricted-pr-ci-testing.yaml
index 044e495..244eac4 100644
--- a/mbed-tls-restricted-pr-ci-testing.yaml
+++ b/mbed-tls-restricted-pr-ci-testing.yaml
@@ -56,3 +56,22 @@
           parent-credentials: false
         ssh-checkout:
           credentials: mbedtls-github-ssh
+    - github:
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls
+        branch-discovery: all
+        discover-pr-origin: both
+        discover-pr-forks-strategy: both
+        discover-pr-forks-trust: permission
+        head-filter-regex: 'gh-readonly-queue/.*|PR-(7958|7959)-(head|merge)'
+        property-strategies:
+          all-branches:
+          - pipeline-branch-durability-override: performance-optimized
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: false
+        ssh-checkout:
+          credentials: mbedtls-github-ssh