diff --git a/.asf.yaml b/.asf.yaml
index 6373e2bc..33ebc904 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -37,10 +37,23 @@ github:
     discussions: true
     wiki: false
     projects: false
-  protected_branches: ~
+  protected_branches:
   collaborators:
     - Xuanwo
 
+  rulesets:
+    - name: "Default Branch Protection"
+      type: branch
+      branches:
+        includes:
+          - "~DEFAULT_BRANCH"
+          - "release/*"
+          - "rel/*"
+        excludes: []
+      bypass_teams:
+        - root
+      restrict_deletion: true
+      restrict_force_push: true
 notifications:
   commits: commits@paimon.apache.org
   issues: issues@paimon.apache.org
diff --git a/scripts/validate_asf_yaml.py b/scripts/validate_asf_yaml.py
index c5534e7c..2a80e84f 100644
--- a/scripts/validate_asf_yaml.py
+++ b/scripts/validate_asf_yaml.py
@@ -43,6 +43,7 @@
     "features",
     "enabled_merge_buttons",
     "protected_branches",
+    "rulesets",
     "collaborators",
     "autolinks",
     "environments",