diff --git a/.signpath/policies/test-signing.yml b/.signpath/policies/test-signing.yml
new file mode 100644
index 000000000..683b27adb
--- /dev/null
+++ b/.signpath/policies/test-signing.yml
@@ -0,0 +1,5 @@
+github-policies:
+  runners:
+    allowed_groups:
+      - "GitHub Actions"
+      - "blacksmith runners 01kbd5v56sg8tz7rea39b7ygpt"