diff --git a/gerrit/acls/openstack/ossa.config b/gerrit/acls/openstack/ossa.config
new file mode 100644
index 0000000000..0f86e1880d
--- /dev/null
+++ b/gerrit/acls/openstack/ossa.config
@@ -0,0 +1,11 @@
+[access "refs/heads/*"]
+abandon = group vmt
+label-Code-Review = -2..+2 group vmt
+label-Workflow = -1..+1 group vmt
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 06770119fa..7dccae54dd 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -527,6 +527,11 @@
   groups:
     - oslo
   upstream: git://github.com/dhellmann/oslo.test.git
+- project: openstack/ossa
+  description: OpenStack Security Advisories
+  upstream: git://github.com/gcmurphy/ossa.git
+  options:
+    - direct-release
 - project: openstack/pycadf
   description: CADF Python module
 - project: openstack/pylockfile
diff --git a/jenkins/jobs/projects.yaml b/jenkins/jobs/projects.yaml
index b99f45ad9c..94910302f7 100644
--- a/jenkins/jobs/projects.yaml
+++ b/jenkins/jobs/projects.yaml
@@ -1353,6 +1353,14 @@
       - python-jobs
       - pypi-jobs
 
+- project:
+    name: ossa
+    node: 'bare-precise || bare-trusty'
+    tarball-site: tarballs.openstack.org
+
+    jobs:
+      - 'gate-{name}-docs'
+
 - project:
     name: qa-specs
     node: 'bare-precise || bare-trusty'
diff --git a/zuul/layout.yaml b/zuul/layout.yaml
index 64e14c6438..12333b168e 100644
--- a/zuul/layout.yaml
+++ b/zuul/layout.yaml
@@ -2516,6 +2516,14 @@ projects:
     post:
       - os-refresh-config-branch-tarball
 
+  - name: openstack/ossa
+    template:
+      - name: merge-check
+    check:
+      - gate-ossa-docs
+    gate:
+      - gate-ossa-docs
+
   - name: openstack/requirements
     template:
       - name: merge-check