Modify access rules
diff --git a/project.config b/project.config
index c2bce90..e2f0e5c 100644
--- a/project.config
+++ b/project.config
@@ -12,3 +12,7 @@
label-Code-Review = -2..+2 group trusted-firmware-staging-approvers
push = +force group trusted-firmware-staging-approvers
submit = group trusted-firmware-staging-approvers
+[access "refs/tags/*"]
+ create = group trusted-firmware-staging-approvers
+ createSignedTag = group trusted-firmware-staging-approvers
+ createTag = group trusted-firmware-staging-approvers