diff --git a/zuul/main.yaml b/zuul/main.yaml
index ab47abd4a3..1413a383e9 100644
--- a/zuul/main.yaml
+++ b/zuul/main.yaml
@@ -21,6 +21,28 @@
           # required-projects
           - openstack/magnum:
               include: []
+      googlesource:
+        untrusted-projects:
+          - include: []
+            projects: &googlesource_projects
+              - gerrit
+              - plugins/checks
+              - plugins/codemirror-editor
+              - plugins/commit-message-length-validator
+              - plugins/delete-project
+              - plugins/download-commands
+              - plugins/gitiles
+              - plugins/hooks
+              - plugins/importer
+              - plugins/its-base
+              - plugins/its-storyboard
+              - plugins/javamelody
+              - plugins/plugin-manager
+              - plugins/replication
+              - plugins/reviewnotes
+              - plugins/singleusergroup
+              - plugins/verify-status
+              - plugins/webhooks
 
 - tenant:
     name: kata-containers
@@ -1578,25 +1600,7 @@
       googlesource:
         untrusted-projects:
           - include: []
-            projects:
-              - gerrit
-              - plugins/checks
-              - plugins/codemirror-editor
-              - plugins/commit-message-length-validator
-              - plugins/delete-project
-              - plugins/download-commands
-              - plugins/gitiles
-              - plugins/hooks
-              - plugins/importer
-              - plugins/its-base
-              - plugins/its-storyboard
-              - plugins/javamelody
-              - plugins/plugin-manager
-              - plugins/replication
-              - plugins/reviewnotes
-              - plugins/singleusergroup
-              - plugins/verify-status
-              - plugins/webhooks
+            projects: *googlesource_projects
 
 - tenant:
     name: zuul