diff --git a/review-policies/core-developers.yml b/review-policies/core-developers.yml
index 414955b..302bf55 100644
--- a/review-policies/core-developers.yml
+++ b/review-policies/core-developers.yml
@@ -141,9 +141,11 @@ approval_rules:
       
     ignore_update_merges: true
 - name: do not merge
-  description: "If the 'review: do not merge' tag is applied, merging is blocked"
+  description: "If the 'review: do not merge' or 'needs testing' tag is applied, merging is blocked"
   requires:
     count: 1
     users: ["ghost"]  # We need a rule that cannot complete
   if:
-    has_labels: ["review: do not merge"]
+    has_labels: 
+      - "review: do not merge"
+      - "needs testing"
diff --git a/workflows/auto_tagger_config.yaml b/workflows/auto_tagger_config.yaml
new file mode 100644
index 0000000..99f85bb
--- /dev/null
+++ b/workflows/auto_tagger_config.yaml
@@ -0,0 +1,2 @@
+needs testing:
+- "**/**"
diff --git a/workflows/auto_tagger_workflow.yaml b/workflows/auto_tagger_workflow.yaml
new file mode 100644
index 0000000..14830f1
--- /dev/null
+++ b/workflows/auto_tagger_workflow.yaml
@@ -0,0 +1,16 @@
+name: "Pull request needs testing tagger"
+
+on:
+  workflow_call:
+    secrets:
+      token:
+        required: true
+
+jobs:
+  add_tag:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/labeler@v3
+      with:
+        repo-token: ${{ secrets.token }}
+        configuration-path: "workflows/auto_tagger_config.yaml"