diff --git a/modules/openstack_project/files/gerrit/acls/openstack/openstack-security-notes.config b/modules/openstack_project/files/gerrit/acls/openstack/openstack-security-notes.config
new file mode 100644
index 0000000000..75d98d84a3
--- /dev/null
+++ b/modules/openstack_project/files/gerrit/acls/openstack/openstack-security-notes.config
@@ -0,0 +1,11 @@
+[access "refs/heads/*"]
+        label-Code-Review = -2..+2 group openstack-security-notes-core
+        label-Approved = +0..+1 group openstack-security-notes-core
+        workInProgress = group openstack-security-notes-core
+[project]
+        state = active
+[receive]
+        requireChangeId = true
+        requireContributorAgreement = true
+[submit]
+        mergeContent = true
diff --git a/modules/openstack_project/files/review.projects.yaml b/modules/openstack_project/files/review.projects.yaml
index 6c1973ac2c..c19190a712 100644
--- a/modules/openstack_project/files/review.projects.yaml
+++ b/modules/openstack_project/files/review.projects.yaml
@@ -256,6 +256,9 @@
   options:
     - direct-release
 - project: openstack/openstack-planet
+- project: openstack/openstack-security-notes
+  description: OpenStack Security Notes (OSSN)
+  upstream: https://github.com/nkinder/openstack-security-notes.git
 - project: openstack/operations-guide
   group: openstack-manuals
   upstream: git://github.com/jeblair/openstack-ops
diff --git a/modules/openstack_project/files/zuul/layout.yaml b/modules/openstack_project/files/zuul/layout.yaml
index 2bcfbe8f2a..85c880850e 100644
--- a/modules/openstack_project/files/zuul/layout.yaml
+++ b/modules/openstack_project/files/zuul/layout.yaml
@@ -2424,6 +2424,12 @@ projects:
       - openstack-operations-guide
       - openstack-operations-guide-ja
 
+  - name: openstack/openstack-security-notes
+    check:
+      - noop
+    gate:
+      - noop
+
 # Section: OpenStack development projects
 
   - name: openstack-dev/cookiecutter