diff --git a/project.config b/project.config
index 2d881040f..4fcf0cb60 100644
--- a/project.config
+++ b/project.config
@@ -7,3 +7,7 @@
 [access "refs/heads/stable"]
 	exclusiveGroupPermissions = submit
 	submit = group flashrom developers
+[access "refs/heads/staging"]
+	submit = group flashrom developers
+[access "refs/tags/*"]
+	push = +force group flashrom developers