<!--IssueSummary start--> <details> <summary> Everyone can contribute. [Help move this issue forward](https://handbook.gitlab.com/handbook/marketing/developer-relations/contributor-success/community-contributors-workflows/#contributor-links) while earning points, leveling up and collecting rewards. </summary> - [Close this issue](https://contributors.gitlab.com/manage-issue?action=close&projectId=278964&issueIid=24873) </details> <!--IssueSummary end--> ### Summary When using the "push-mirror" functionality, gitlab pushes tags although the "Only mirror protected branches" checkbox has been selected. ### Steps to reproduce 1. create source and destination repositories (e.g. https://gitlab.com/ensc/test-mirror-src + https://gitlab.com/ensc/test-mirror-dst) and configure mirroring from `src` to `dst`. Select  2. Work in `src` 3. Create a tag in `src` 4. Work in `src` 5. Configure `dst` that every tag (`*`) is protected and that nobody can create them 6. repeat 3+4 ### What is the current *bug* behavior? - the tag created by 3. exists in `dst` - after 5. mirroring fails with  ### What is the expected *correct* behavior? - only the (protected) `master` branch is in the `dst` repo, no tags - mirroring succeeds after 5.