diff --git a/.github/code-review/policy.yml b/.github/code-review/policy.yml
index ae7629e..f4f43ce 100644
--- a/.github/code-review/policy.yml
+++ b/.github/code-review/policy.yml
@@ -41,3 +41,8 @@ ignore_paths:
 
 check_name: "Code review"
 timeout_minutes: 15
+
+# The SDK-sync pipeline (MarketData-App/sdk-bot) opens pull requests here as
+# the GitHub App `marketdata-sdk-sync`. An App is not a member of the
+# organization, so it is trusted by name.
+trusted_authors: ["marketdata-sdk-sync[bot]"]