diff --git a/.github/.OwlBot.lock.yaml b/.github/.OwlBot.lock.yaml
index c612c534b..a6d240b4f 100644
--- a/.github/.OwlBot.lock.yaml
+++ b/.github/.OwlBot.lock.yaml
@@ -13,5 +13,5 @@
 # limitations under the License.
 docker:
   image: gcr.io/cloud-devrel-public-resources/owlbot-nodejs:latest
-  digest: sha256:079b0f3bd8427671745ec03a5179575b4c86a4e776fb6041427e553719c65c2b
-# created: 2022-05-10T15:57:49.166896548Z
+  digest: sha256:3f802f47bce31df4ee6b9513ca085a049347dba6837a4bdfa411b77ae0a9bc43
+# created: 2022-06-09T16:44:26.566602255Z
diff --git a/.github/sync-repo-settings.yaml b/.github/sync-repo-settings.yaml
index d1e8b5e6e..4a30a08e5 100644
--- a/.github/sync-repo-settings.yaml
+++ b/.github/sync-repo-settings.yaml
@@ -3,7 +3,7 @@ branchProtectionRules:
     isAdminEnforced: true
     requiredApprovingReviewCount: 1
     requiresCodeOwnerReviews: true
-    requiresStrictStatusChecks: false
+    requiresStrictStatusChecks: true
     requiredStatusCheckContexts:
       - "ci/kokoro: Samples test"
       - "ci/kokoro: System test"
@@ -15,3 +15,10 @@ branchProtectionRules:
       - cla/google
       - windows
       - OwlBot Post Processor
+permissionRules:
+  - team: yoshi-admins
+    permission: admin
+  - team: jsteam-admins
+    permission: admin
+  - team: jsteam
+    permission: push