From 5bc52e6be4e7f4ab32e572908d57be22cec7bb48 Mon Sep 17 00:00:00 2001
From: Sarah Chen <sarah.chen@datadoghq.com>
Date: Fri, 18 Jul 2025 10:11:06 -0400
Subject: [PATCH] Add dd-octo-sts trust policy

---
 .github/chainguard/self.gitlab.release.sts.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 .github/chainguard/self.gitlab.release.sts.yaml

diff --git a/.github/chainguard/self.gitlab.release.sts.yaml b/.github/chainguard/self.gitlab.release.sts.yaml
new file mode 100644
index 00000000000..74ee1b28899
--- /dev/null
+++ b/.github/chainguard/self.gitlab.release.sts.yaml
@@ -0,0 +1,11 @@
+issuer: https://gitlab.ddbuild.io
+
+subject_pattern: "project_path:DataDog/apm-reliability/dd-trace-java:ref_type:tag:ref:v.*"
+
+claim_pattern:
+  project_path: "DataDog/apm-reliability/dd-trace-java"
+  ref_type: "tag"
+  ref: "v.*"
+
+permissions:
+  contents: "write"