With delegated alert dismissal for secret scaning alerts, you can require a review process before alerts are dismissed. This helps you better manage your security risk as well as meet audit and compliance requirements.
Managing alert dismissal requests is now available with the REST API, offering flexibility for triage and reviews by integrating with your existing workflows.
Reviewers can retrieve dismissal requests for an organization or repository with the following endpoints:
GET /orgs/{org}/dismissal-requests/secret-scanning
GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning
GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}
Reviewers can review a dismissal request with the following endpoint:
Learn more about how to secure your repositories with secret scanning.