zuul/tests/fixtures/config/unprotected-branches/main.yaml

- tenant:
    name: tenant-one
    source:
      github:
        config-projects:
          - org/common-config
        untrusted-projects:
          - org/project1
          - org/project2:
              exclude-unprotected-branches: true