diff --git a/buildbot_nix/github_projects.py b/buildbot_nix/github_projects.py
index a2c2ef8..6f40319 100644
--- a/buildbot_nix/github_projects.py
+++ b/buildbot_nix/github_projects.py
@@ -116,7 +116,7 @@ class GithubBackend(GitBackend):
             "secret": self.webhook_secret,
             "strict": True,
             "token": self.config.token(),
-            "github_property_whitelist": "*",
+            "github_property_whitelist": ["github.base.sha", "github.head.sha"],
         }
 
     def create_avatar_method(self) -> AvatarBase | None: