Adds docs for new tag protection rules feature (#25461)

* Adds docs for configuring tag protection rules

* Adds beta note

* Optimize images

* Use correct terminology for permissions

Co-authored-by: David Staheli <[email protected]>

* Removes public from beta wording

Co-authored-by: David Staheli <[email protected]>

* Adds ommitted quotation

* Add new article to the repositories category

* Simplify language

Co-authored-by: hubwriter <[email protected]>

* Link to more information on repository roles

Co-authored-by: hubwriter <[email protected]>

* Clarify what protected tags are

Co-authored-by: hubwriter <[email protected]>

* Specify that repository roles only aid in management of protected tags

Co-authored-by: hubwriter <[email protected]>

* Add table rows for protected tags

Co-authored-by: github-actions <[email protected]>
Co-authored-by: David Staheli <[email protected]>
Co-authored-by: hubwriter <[email protected]>

Author: 4 people

assets/images/help/repository/add-tag-protection-rule.png

@@ -111,7 +111,9 @@ Some of the features listed below are limited to organizations using {% data var
 | Configure [a publishing source for {% data variables.product.prodname_pages %}](/articles/configuring-a-publishing-source-for-github-pages) | | | | **X** | **X** |
 | [Manage branch protection rules](/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/managing-a-branch-protection-rule) | | | | | **X** |
 | [Push to protected branches](/articles/about-protected-branches) | | | | **X** | **X** |
-| Merge pull requests on protected branches, even if there are no approving reviews | | | | | **X** |
+| Merge pull requests on protected branches, even if there are no approving reviews | | | | | **X** |{% ifversion fpt or ghes > 3.4 or ghae-issue-6337 or ghec %}
+| Create tags that match a [tag protection rule](/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/configuring-tag-protection-rules) | | | | **X** | **X** |
+| Delete tags that match a [tag protection rule](/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/configuring-tag-protection-rules) | | | | | **X** |{% endif %}
 | [Create and edit repository social cards](/articles/customizing-your-repositorys-social-media-preview) | | | | **X** | **X** |{% ifversion fpt or ghec %}
 | Limit [interactions in a repository](/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository)| | | | **X** | **X** |{% endif %}
 | Delete an issue (see "[Deleting an issue](/articles/deleting-an-issue)") | | | | | **X** |

assets/images/help/repository/new-tag-protection-rule.png

@@ -84,6 +84,8 @@ You can only choose an additional permission if it's not already included in the
 - **Set interaction limits**: Temporarily restrict certain users from commenting, opening issues, or creating pull requests in your public repository to enforce a period of limited activity. For more information, see "[Limiting interactions in your repository](/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository)."
 - **Set the social preview**: Add an identifying image to your repository that appears on social media platforms when your repository is linked. For more information, see "[Customizing your repository's social media preview](/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/customizing-your-repositorys-social-media-preview)."
 - **Push commits to protected branches**: Push to a branch that is marked as a protected branch.
+- **Create protected tags**: Create tags that match a tag protection rule. For more information, see "[Configuring tag protection rules](/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/configuring-tag-protection-rules)."
+- **Delete protected tags**: Delete tags that match a tag protection rule. For more information, see "[Configuring tag protection rules](/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/configuring-tag-protection-rules)."
 
 ### Security
 

assets/images/help/repository/set-tag-protection-pattern.png

@@ -0,0 +1,30 @@
+---
+title: Configuring tag protection rules
+shortTitle: Configure tag rules
+intro: You can configure tag protection rules for your repository to prevent contributors from creating or deleting tags.
+versions:
+  fpt: '*'
+  ghes: '>3.4'
+  ghae: 'issue-6337'
+  ghec: '*'
+---
+
+{% note %}
+
+**Note:** Tag protection rules are currently in beta and subject to change.
+
+{% endnote %}
+
+When you add a tag protection rule, all tags that match the pattern provided will be protected. Only users with admin or maintain permissions in the repository will be able to create protected tags, and only users with admin permissions in the repository will be able to delete protected tags. For more information, see "[Repository roles for an organization](/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization#permissions-for-each-role)."
+
+Additionally, you can create custom repository roles to allow other groups of users to create or delete tags that match tag protection rules. For more information, see "[Managing custom repository roles for an organization](/organizations/managing-peoples-access-to-your-organization-with-roles/managing-custom-repository-roles-for-an-organization)."
+
+{% data reusables.repositories.navigate-to-repo %}
+{% data reusables.repositories.sidebar-settings %}
+1. In the "Code and automation" section of the sidebar, click **{% octicon "tag" aria-label="The tag icon" %} Tags**.
+1. Click **New rule**.
+![New tag protection rule](/assets/images/help/repository/new-tag-protection-rule.png)
+1. Under "Tag name pattern", type the pattern of the tags you want to protect. In this example, typing "\*" protects all tags. 
+![Set tag protection pattern](/assets/images/help/repository/set-tag-protection-pattern.png)
+1. Click **Add rule**.
+![Add tag protection rule](/assets/images/help/repository/add-tag-protection-rule.png)

content/organizations/managing-access-to-your-organizations-repositories/repository-roles-for-an-organization.md

@@ -17,6 +17,7 @@ children:
   - /enabling-anonymous-git-read-access-for-a-repository
   - /about-email-notifications-for-pushes-to-your-repository
   - /configuring-autolinks-to-reference-external-resources
+  - /configuring-tag-protection-rules
 shortTitle: Manage repository settings
 ---