Fetch the commit SHA from the source project

In case the source project is a fork, we'll need to pull in the commit SHA to do the test update.

#505 (closed)