[sigtarp] add to pending safe.yml