diff --git a/.github/BOT_APPROVED_FILES b/.github/BOT_APPROVED_FILES
new file mode 100644
index 0000000000..127fb0959d
--- /dev/null
+++ b/.github/BOT_APPROVED_FILES
@@ -0,0 +1,6 @@
+# List of approved files that can be changed by a bot via an automated PR
+# This is to increase security and prevent accidentally updating files that shouldn't be changed by a bot
+Cargo.lock
+nix/sources.json
+src/dfx/Cargo.toml
+src/dfx/assets/dfx-asset-sources.toml