diff --git a/.github/repo_policies/BOT_APPROVED_FILES b/.github/repo_policies/BOT_APPROVED_FILES
new file mode 100644
index 000000000..1b27ddc73
--- /dev/null
+++ b/.github/repo_policies/BOT_APPROVED_FILES
@@ -0,0 +1,9 @@
+# List of approved files that can be changed by a bot via an automated PR
+# This is to increase security and prevent accidentally updating files that shouldn't be changed by a bot
+
+replica-releases.*
+.*Cargo.toml.*
+.*Cargo.lock.*
+Cargo.Bazel.lock
+pyproject.toml
+requirements.*lock