diff --git a/.github/workflows/test-hw.yml b/.github/workflows/test-hw.yml
index 81f07354..fe71c0a0 100644
--- a/.github/workflows/test-hw.yml
+++ b/.github/workflows/test-hw.yml
@@ -10,7 +10,7 @@ name: HW
 
 on:
   # needs PR target for secrets access; guard by requiring label
-  pull_request_target:
+  pull_request_target: # !! dummy
     types: [opened, reopened, synchronize, labeled]
 
 # downgrade permissions to read-only as you would have in a standard PR action
diff --git a/apps/Arm/vm_minimal/zcu102/2022_1/devices.camkes b/apps/Arm/vm_minimal/zcu102/2022_1/devices.camkes
index 5450e817..d0d2e49f 100644
--- a/apps/Arm/vm_minimal/zcu102/2022_1/devices.camkes
+++ b/apps/Arm/vm_minimal/zcu102/2022_1/devices.camkes
@@ -27,7 +27,8 @@ assembly {
             "initrd_addr" : VAR_STRINGIZE(VM_INITRD_ADDR),
             "kernel_entry_addr" : VAR_STRINGIZE(VM_ENTRY_ADDR),
         };
-        vm0.num_vcpus = 4;
+        vm0.num_vcpus = 2;
+        vm0.pcpus = [2, 3];
 
         /* Extra untyped pool to allow for 256MB of RAM */
         vm0.simple_untyped28_pool = 1;