diff --git a/.asf.yaml b/.asf.yaml
index 2b002ca52a..1a4db1fede 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -32,7 +32,29 @@ github:
     squash: true
     merge: true
     rebase: false
-
+  rulesets:
+    - name: "Branch Protection"
+      type: branch
+      branches:
+        includes:
+          - "main"
+          - "release/*"
+        excludes: []
+      bypass_teams:
+        - "release-managers"
+      restrict_deletion: true
+      restrict_force_push: true
+      required_signatures: false
+      required_linear_history: true
+      required_conversation_resolution: false
+      required_pull_request_reviews:
+        dismiss_stale_reviews: true
+        require_last_push_approval: false
+        require_code_owner_reviews: false
+        required_approving_review_count: 0
+      required_status_checks:
+        - name: "build"
+          app_slug: -1
 notifications:
   pullrequests: commits@shiro.apache.org
   commits: commits@shiro.apache.org