Show warning when a public tag used as workflow trigger

[kesselb]

How to use GitHub

• Please use the 👍 reaction to show that you are affected by the same issue.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

---

Steps to reproduce

1. Have a public tag
2. That tag is used as a workflow trigger
3. The workflow lists a group for "Who can request approval"
4. Given that the tag is public, any user can trigger that workflow.

Expected behaviour

There should be a warning, that in such a configuration "Who can request approval" is not enforced.