- tenant:
    name: tenant-one
    exclude-unprotected-branches: true
    source:
      gerrit:
        config-projects:
          - common-config
        untrusted-projects:
          - org/project
          - org/project1
          - org/project2
          - org/project3
      github:
        untrusted-projects:
          - gh/project
          - gh/project1
          - gh/project2
          - gh/project3

- tenant:
    name: tenant-two
    source:
      gerrit:
        untrusted-projects:
          - org/project4