diff --git a/policy/github.com/openvex/go-vex/source-policy.json b/policy/github.com/openvex/go-vex/source-policy.json
new file mode 100644
index 00000000..03749b2b
--- /dev/null
+++ b/policy/github.com/openvex/go-vex/source-policy.json
@@ -0,0 +1,13 @@
+{
+  "canonical_repo": "https://github.com/openvex/go-vex.git",
+  "protected_branches": [
+    {
+      "Name": "refs/heads/main",
+      "Since": "0001-01-01T00:00:00Z",
+      "target_slsa_source_level": "SLSA_SOURCE_LEVEL_1",
+      "require_review": false,
+      "org_status_check_controls": null
+    }
+  ],
+  "protected_tag": null
+}
\ No newline at end of file