diff --git a/.golangci.reference.yml b/.golangci.reference.yml
index 131458efa9f9..ad030269b009 100644
--- a/.golangci.reference.yml
+++ b/.golangci.reference.yml
@@ -457,6 +457,7 @@ linters-settings:
         #   ruleguard prints the specific Where() condition that was rejected.
         #
         # The flag is passed to the ruleguard 'debug-group' argument.
+        # Default: ""
         debug: 'emptyDecl'
         # Deprecated, use 'failOn' param.
         # If set to true, identical to failOn='all', otherwise failOn=''
@@ -467,12 +468,22 @@ linters-settings:
         # - 'all':    fail on all errors.
         # - 'import': ruleguard rule imports a package that cannot be found.
         # - 'dsl':    gorule file does not comply with the ruleguard DSL.
+        # Default: ""
         failOn: dsl
         # Comma-separated list of file paths containing ruleguard rules.
         # If a path is relative, it is relative to the directory where the golangci-lint command is executed.
         # The special '${configDir}' variable is substituted with the absolute directory containing the golangci config file.
         # Glob patterns such as 'rules-*.go' may be specified.
+        # Default: ""
         rules: '${configDir}/ruleguard/rules-*.go,${configDir}/myrule1.go'
+        # Comma-separated list of enabled groups or skip empty to enable everything.
+        # Tags can be defined with # character prefix.
+        # Default: "<all>"
+        enable: "myGroupName,#myTagName"
+        # Comma-separated list of disabled groups or skip empty to enable everything.
+        # Tags can be defined with # character prefix.
+        # Default: ""
+        disable: "myGroupName,#myTagName"
       tooManyResultsChecker:
         # Maximum number of results.
         # Default: 5