diff --git a/.github/rulesets/ruleset-prereg-tags-immutable.json b/.github/rulesets/ruleset-prereg-tags-immutable.json
index 7ef8cdf..a72ac32 100644
--- a/.github/rulesets/ruleset-prereg-tags-immutable.json
+++ b/.github/rulesets/ruleset-prereg-tags-immutable.json
@@ -19,6 +19,9 @@
     },
     {
       "type": "required_signatures"
+    },
+    {
+      "type": "non_fast_forward"
     }
   ],
   "bypass_actors": [
diff --git a/.github/rulesets/ruleset-release-tags-immutable.json b/.github/rulesets/ruleset-release-tags-immutable.json
index 86f0145..ad68e91 100644
--- a/.github/rulesets/ruleset-release-tags-immutable.json
+++ b/.github/rulesets/ruleset-release-tags-immutable.json
@@ -26,6 +26,9 @@
     },
     {
       "type": "required_signatures"
+    },
+    {
+      "type": "non_fast_forward"
     }
   ]
 }