diff --git a/.github/workflows/apply-admin-safe-settings.yml b/.github/workflows/apply-admin-safe-settings.yml
new file mode 100644
index 0000000..5f4c9e6
--- /dev/null
+++ b/.github/workflows/apply-admin-safe-settings.yml
@@ -0,0 +1,23 @@
+name: Apply Admin Safe Settings
+on:
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: Whether to run in `dry-run` mode or not
+        required: false
+        type: boolean
+        default: true
+
+permissions: {}
+
+jobs:
+  apply-safe-settings:
+    permissions:
+      contents: read
+    # This is required to work with environment secrets in the called workflow
+    secrets: inherit # zizmor: ignore[secrets-inherit]
+    uses: ./.github/workflows/libsafe-settings.yml
+    with:
+      admin-repo: admin
+      config-path: admin-safe-settings
+      dry-run: ${{ inputs.dry-run }}
diff --git a/.github/workflows/safe-settings.yml b/.github/workflows/apply-formula-safe-settings.yml
similarity index 93%
rename from .github/workflows/safe-settings.yml
rename to .github/workflows/apply-formula-safe-settings.yml
index b1a546c..907c740 100644
--- a/.github/workflows/safe-settings.yml
+++ b/.github/workflows/apply-formula-safe-settings.yml
@@ -1,4 +1,4 @@
-name: Apply Admin Safe Settings
+name: Apply Formula Safe Settings
 on:
   workflow_dispatch:
     inputs:
diff --git a/admin-safe-settings/deployment-settings.yml b/admin-safe-settings/deployment-settings.yml
new file mode 100644
index 0000000..5198729
--- /dev/null
+++ b/admin-safe-settings/deployment-settings.yml
@@ -0,0 +1,3 @@
+restrictedRepos:
+  include:
+    - admin
diff --git a/admin-safe-settings/settings.yml b/admin-safe-settings/settings.yml
new file mode 100644
index 0000000..0dd798d
--- /dev/null
+++ b/admin-safe-settings/settings.yml
@@ -0,0 +1,3 @@
+repository:
+  topics:
+    - safe-settings