diff --git a/.github/buildomat/config.toml b/.github/buildomat/config.toml
new file mode 100644
index 0000000..419173f
--- /dev/null
+++ b/.github/buildomat/config.toml
@@ -0,0 +1,22 @@
+#
+# This file, with this flag, must be present in the default branch in order for
+# the buildomat integration to create check suites.
+#
+enable = true
+
+#
+# Require approval for pull requests made by users outside our organisation.
+#
+org_only = true
+
+#
+# We accept pull requests from several automated services that are outside the
+# organisation.  Allow jobs from those sources to proceed without manual
+# approval:
+#
+allow_users = [
+	"dependabot[bot]",
+	"oxide-reflector-bot[bot]",
+	"oxide-renovate[bot]",
+	"renovate[bot]",
+]