Secret scanning push protection is supported for content upload REST API endpoints
Push protection blocks you from pushing secrets to a repository and generates an alert whenever you bypass the block.
Push protection is now supported for the following REST API endpoints:
* Create a blob
* Create or update file contents
If the content of a PUT request to these endpoints includes a secret, the API will respond with a 409 error and provide a link for bypassing push protection, along with a placeholder_id.
There is also a new API endpoint to bypass push protection programatically, Create a push protection bypass. You or your application can use the placeholder_id from your push protection block in your call to this endpoint.
You need to be the individual or application that initially got blocked to be able to bypass the block successfully.