diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 4945fc293e3..9844c8c58e8 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -35,6 +35,7 @@ WORKSPACE.bazel @10gen/devprod-build @svc-auto-approve-bot
 # The following patterns are parsed from ./.github/OWNERS.yml
 /.github/ @10gen/server-root-ownership @svc-auto-approve-bot
 /.github/ALLOWED_UNOWNED_FILES.yml @svc-auto-approve-bot alex.neben@mongodb.com
+/.github/workflows @10gen/devprod-correctness @svc-auto-approve-bot
 
 # The following patterns are parsed from ./bazel/OWNERS.yml
 /bazel/**/* @10gen/devprod-build @svc-auto-approve-bot
diff --git a/.github/OWNERS.yml b/.github/OWNERS.yml
index 1779ac93507..b51cb5386a9 100644
--- a/.github/OWNERS.yml
+++ b/.github/OWNERS.yml
@@ -6,3 +6,6 @@ filters:
   - "/ALLOWED_UNOWNED_FILES.yml":
     approvers:
       - alex.neben@mongodb.com
+  - "workflows":
+    approvers:
+      - 10gen/devprod-correctness
diff --git a/copy.bara.sky b/copy.bara.sky
index 18fd17bc7ac..ccd6b2c1d41 100644
--- a/copy.bara.sky
+++ b/copy.bara.sky
@@ -20,7 +20,7 @@ def make_workflow(workflow_name, destination_url, branch):
             push = branch,
         ),
         # Change path to the folder you want to publish publicly
-        origin_files = glob(["**"], exclude = ["src/mongo/db/modules/**", "buildscripts/modules/**"]),
+        origin_files = glob(["**"], exclude = ["src/mongo/db/modules/**", "buildscripts/modules/**", ".github/workflows/**"]),
         authoring = authoring.pass_thru("MongoDB <mongodb@mongodb.com>"),
         mode = "ITERATIVE",
         transformations = [