diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e5a39bc..7d81d9e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,3 +1,6 @@
+###
+# This file is synced from https://github.com/prometheus/prometheus
+###
 version: 2
 updates:
   - package-ecosystem: "gomod"
@@ -30,6 +33,7 @@ updates:
           - "github/codeql-action*"
     # Exclude configs synced from upstream prometheus/prometheus.
     exclude-paths:
+      - .github/workflows/approve-workflows.yml
       - .github/workflows/container_description.yml
       - .github/workflows/golangci-lint.yml
       - .github/workflows/govulncheck.yml
diff --git a/.github/workflows/approve-workflows.yml b/.github/workflows/approve-workflows.yml
new file mode 100644
index 0000000..f372012
--- /dev/null
+++ b/.github/workflows/approve-workflows.yml
@@ -0,0 +1,27 @@
+---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
+name: Approve pending workflows
+
+on:
+  issue_comment:
+    types: [created]
+
+permissions: read-all
+
+jobs:
+  approve:
+    if: >-
+      github.event.issue.pull_request &&
+      github.event.comment.body == '/workflow-approve' &&
+      (github.repository_owner == 'prometheus' || github.repository_owner == 'prometheus-community')
+    runs-on: ubuntu-latest
+    permissions:
+      actions: write
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: prometheus/promci/approve_workflows@370e8c15dcec50043cbe66f2f34633d9efc0a190 # v0.9.0
+        with:
+          github_token: ${{ github.token }}
diff --git a/.github/workflows/container_description.yml b/.github/workflows/container_description.yml
index 0e2f274..591a4d6 100644
--- a/.github/workflows/container_description.yml
+++ b/.github/workflows/container_description.yml
@@ -1,4 +1,7 @@
 ---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
 name: Push README to Docker Hub
 on:
   push:
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index 621476d..374df32 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -1,4 +1,7 @@
 ---
+###
+# This action is synced from https://github.com/prometheus/prometheus
+###
 name: govulncheck
 on:
   pull_request:
diff --git a/.yamllint b/.yamllint
index b329f46..b52b0be 100644
--- a/.yamllint
+++ b/.yamllint
@@ -1,4 +1,7 @@
 ---
+###
+# This file is synced from https://github.com/prometheus/prometheus
+###
 extends: default
 ignore: |
   **/node_modules