[nsf] add to pending safe.yml