Manage secret scanning alert dismissal requests with the REST API

With delegated alert dismissal for secret scaning alerts, you can require a review process before alerts are dismissed. This helps you better manage your security risk as well as meet audit and compliance requirements.

Managing alert dismissal requests is now available with the REST API, offering flexibility for triage and reviews by integrating with your existing workflows.

Reviewers can retrieve dismissal requests for an organization or repository with the following endpoints:

• GET /orgs/{org}/dismissal-requests/secret-scanning
• GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning
• GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}

Reviewers can review a dismissal request with the following endpoint:

• PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}

Learn more about how to secure your repositories with secret scanning.