diff --git a/.asf.yaml b/.asf.yaml
index 90b9dad8b9..b6ffba0ce6 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -1,22 +1,3 @@
-# Licensed to the Apache Software Foundation (ASF) under one
-# or more contributor license agreements.  See the NOTICE file
-# distributed with this work for additional information
-# regarding copyright ownership.  The ASF licenses this file
-# to you under the Apache License, Version 2.0 (the
-# "License"); you may not use this file except in compliance
-# with the License.  You may obtain a copy of the License at
-#
-#   http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing,
-# software distributed under the License is distributed on an
-# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-# KIND, either express or implied.  See the License for the
-# specific language governing permissions and limitations
-# under the License.
-
-# https://cwiki.apache.org/confluence/display/INFRA/.asf.yaml+features+for+git+repositories
----
 
 notifications:
   commits: commits@hop.apache.org
@@ -77,4 +58,18 @@ github:
   protected_branches: ~
 #    master:
 #      required_pull_request_reviews:
-#        required_approving_review_count: 1
\ No newline at end of file
+#        required_approving_review_count: 1
+
+  rulesets:
+    - name: "Default Branch Protection"
+      type: branch
+      branches:
+        includes:
+          - "~DEFAULT_BRANCH"
+          - "release/*"
+          - "rel/*"
+        excludes: []
+      bypass_teams:
+        - root
+      restrict_deletion: true
+      restrict_force_push: true
diff --git a/.github/workflows/pr_tagger.yml b/.github/workflows/pr_tagger.yml
index b4de2a06f0..9be1e4dc50 100644
--- a/.github/workflows/pr_tagger.yml
+++ b/.github/workflows/pr_tagger.yml
@@ -18,7 +18,7 @@
 
 name: LabelPrs
 on: [pull_request_target]
-permissions: read-all
+permissions: read
 jobs:
   label:
     runs-on: ubuntu-latest
diff --git a/pom.xml b/pom.xml
index 3fbbaaf602..cf53a7bc72 100644
--- a/pom.xml
+++ b/pom.xml
@@ -472,6 +472,7 @@
                         <exclude>DISCLAIMER</exclude>
                         <exclude>LICENSE</exclude>
                         <exclude>NOTICE</exclude>
+                        <exclude>.asf.yaml</exclude>
                         <exclude>**/licenses/*</exclude>
                         <exclude>**/target/**</exclude>
                         <exclude>**/*.svg</exclude>