diff --git a/project.config b/project.config
index e894e38..a2353b5 100644
--- a/project.config
+++ b/project.config
@@ -4,6 +4,7 @@
 	action = rebase if necessary
 [access "refs/*"]
 	read = group Non-Interactive Users
+	label-Allow-CI = +0..+1 group trusted-firmware-a-approvers
 [access "refs/heads/*"]
 	create = group trusted-firmware-a-approvers
 	forgeAuthor = group trusted-firmware-a-approvers
@@ -20,6 +21,7 @@
 	create = group trusted-firmware-a-approvers
 	createTag = group trusted-firmware-a-approvers
 	createSignedTag = group trusted-firmware-a-approvers
+
 [label "Verified"]
 	function = MaxWithBlock
 	value = -1 Fails
@@ -27,9 +29,16 @@
 	value = +1 Verified
 	copyAllScoresIfNoCodeChange = true
 	defaultValue = 0
+
 [label "IP-Review"]
 	function = MaxWithBlock
 	value = -1 Do not submit
 	value =  0 No score
 	value = +1 IP Review clear
 	defaultValue = 0
+
+[label "Allow-CI"]
+	function = MaxWithBlock
+	value =	0 No score
+	value = +1 Approved for automated testing
+	defaultValue = 0