{"meta":{"title":"Solicitudes de descarte de alertas","intro":"Usa la API REST para administrar solicitudes de descarte de alertas para el análisis de secretos.","product":"REST API","breadcrumbs":[{"href":"/es/enterprise-cloud@latest/rest","title":"REST API"},{"href":"/es/enterprise-cloud@latest/rest/secret-scanning","title":"Escaneo de secretos"},{"href":"/es/enterprise-cloud@latest/rest/secret-scanning/alert-dismissal-requests","title":"Solicitudes de descarte de alertas"}],"documentType":"article"},"body":"# Solicitudes de descarte de alertas\n\nUsa la API REST para administrar solicitudes de descarte de alertas para el análisis de secretos.\n\n> [!NOTE]\n> Most endpoints use `Authorization: Bearer <YOUR-TOKEN>` and `Accept: application/vnd.github+json` headers, plus `X-GitHub-Api-Version: 2026-03-10`. Curl examples below omit these standard headers for brevity.\n\n## List alert dismissal requests for secret scanning for an enterprise\n\n```\nGET /enterprises/{enterprise}/dismissal-requests/secret-scanning\n```\n\nLists requests to dismiss secret scanning alerts in an enterprise.\nThe authenticated user must be an enterprise owner or an enterprise security manager to access this endpoint.\nPersonal access tokens (classic) need the security_events scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n- **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n- **`enterprise`** (string) (required)\n  The slug version of the enterprise name.\n\n- **`organization_name`** (string)\n  The name of the organization to filter on.\n\n- **`reviewer`** (string)\n  Filter bypass requests by the handle of the GitHub user who reviewed the bypass request.\n\n- **`requester`** (string)\n  Filter bypass requests by the handle of the GitHub user who requested the bypass.\n\n- **`time_period`** (string)\n  The time period to filter by.\nFor example, day will filter for rule suites that occurred in the past 24 hours, and week will filter for rule suites that occurred in the past 7 days (168 hours).\n  Default: `day`\n  Can be one of: `hour`, `day`, `week`, `month`\n\n- **`request_status`** (string)\n  The status of the dismissal request to filter on. When specified, only requests with this status will be returned.\n  Default: `all`\n  Can be one of: `completed`, `cancelled`, `approved`, `expired`, `denied`, `open`, `all`\n\n- **`per_page`** (integer)\n  The number of results per page (max 100). For more information, see \"Using pagination in the REST API.\"\n  Default: `30`\n\n- **`page`** (integer)\n  The page number of the results to fetch. For more information, see \"Using pagination in the REST API.\"\n  Default: `1`\n\n### HTTP response status codes\n\n- **200** - A list of the alert dismissal requests.\n\n- **403** - Forbidden\n\n- **404** - Resource not found\n\n- **500** - Internal Error\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/enterprises/ENTERPRISE/dismissal-requests/secret-scanning\n```\n\n**Response schema (Status: 200):**\n\nArray of `Secret scanning alert dismissal request`:\n  * `id`: integer\n  * `number`: integer\n  * `repository`: object:\n    * `id`: integer\n    * `name`: string\n    * `full_name`: string\n  * `organization`: object:\n    * `id`: integer\n    * `name`: string\n  * `requester`: object:\n    * `actor_id`: integer\n    * `actor_name`: string\n  * `request_type`: string\n  * `data`: array of objects or null:\n    * `secret_type`: string\n    * `alert_number`: string\n    * `reason`: string, enum: `fixed_later`, `false_positive`, `tests`, `revoked`\n  * `resource_identifier`: string\n  * `status`: string, enum: `pending`, `denied`, `approved`, `cancelled`, `expired`\n  * `requester_comment`: string or null\n  * `expires_at`: string, format: date-time\n  * `created_at`: string, format: date-time\n  * `responses`: array of `Bypass response` or null:\n    * `id`: integer\n    * `reviewer`: object:\n      * `actor_id`: integer\n      * `actor_name`: string\n    * `status`: string, enum: `approved`, `denied`, `dismissed`\n    * `created_at`: string, format: date-time\n  * `url`: string, format: uri\n  * `html_url`: string, format: uri\n\n## List alert dismissal requests for secret scanning for an org\n\n```\nGET /orgs/{org}/dismissal-requests/secret-scanning\n```\n\nLists requests to dismiss secret scanning alerts in an org.\nDelegated alert dismissal must be enabled on repositories in the org and the user must be an org admin, security manager,\nor have the \"Review and manage secret scanning alert dismissal requests\" permission to access this endpoint.\n\n### Parameters\n\n#### Headers\n\n- **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n- **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n- **`repository_name`** (string)\n  The name of the repository to filter on.\n\n- **`reviewer`** (string)\n  Filter bypass requests by the handle of the GitHub user who reviewed the bypass request.\n\n- **`requester`** (string)\n  Filter bypass requests by the handle of the GitHub user who requested the bypass.\n\n- **`time_period`** (string)\n  The time period to filter by.\nFor example, day will filter for rule suites that occurred in the past 24 hours, and week will filter for rule suites that occurred in the past 7 days (168 hours).\n  Default: `day`\n  Can be one of: `hour`, `day`, `week`, `month`\n\n- **`request_status`** (string)\n  The status of the dismissal request to filter on. When specified, only requests with this status will be returned.\n  Default: `all`\n  Can be one of: `completed`, `cancelled`, `approved`, `expired`, `denied`, `open`, `all`\n\n- **`per_page`** (integer)\n  The number of results per page (max 100). For more information, see \"Using pagination in the REST API.\"\n  Default: `30`\n\n- **`page`** (integer)\n  The page number of the results to fetch. For more information, see \"Using pagination in the REST API.\"\n  Default: `1`\n\n### HTTP response status codes\n\n- **200** - A list of the alert dismissal requests.\n\n- **403** - Forbidden\n\n- **404** - Resource not found\n\n- **500** - Internal Error\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/dismissal-requests/secret-scanning\n```\n\n**Response schema (Status: 200):**\n\nSame response schema as [List alert dismissal requests for secret scanning for an enterprise](#list-alert-dismissal-requests-for-secret-scanning-for-an-enterprise).\n\n## List alert dismissal requests for secret scanning for a repository\n\n```\nGET /repos/{owner}/{repo}/dismissal-requests/secret-scanning\n```\n\nLists requests to dismiss secret scanning alerts in a repository.\nDelegated alert dismissal must be enabled on the repository and the user must be an org admin, security manager,\nor have the \"Review and manage secret scanning alert dismissal requests\" permission to access this endpoint.\n\n### Parameters\n\n#### Headers\n\n- **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n- **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n- **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n- **`reviewer`** (string)\n  Filter bypass requests by the handle of the GitHub user who reviewed the bypass request.\n\n- **`requester`** (string)\n  Filter bypass requests by the handle of the GitHub user who requested the bypass.\n\n- **`time_period`** (string)\n  The time period to filter by.\nFor example, day will filter for rule suites that occurred in the past 24 hours, and week will filter for rule suites that occurred in the past 7 days (168 hours).\n  Default: `day`\n  Can be one of: `hour`, `day`, `week`, `month`\n\n- **`request_status`** (string)\n  The status of the dismissal request to filter on. When specified, only requests with this status will be returned.\n  Default: `all`\n  Can be one of: `completed`, `cancelled`, `approved`, `expired`, `denied`, `open`, `all`\n\n- **`per_page`** (integer)\n  The number of results per page (max 100). For more information, see \"Using pagination in the REST API.\"\n  Default: `30`\n\n- **`page`** (integer)\n  The page number of the results to fetch. For more information, see \"Using pagination in the REST API.\"\n  Default: `1`\n\n### HTTP response status codes\n\n- **200** - A list of the alert dismissal requests.\n\n- **403** - Forbidden\n\n- **404** - Resource not found\n\n- **500** - Internal Error\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/dismissal-requests/secret-scanning\n```\n\n**Response schema (Status: 200):**\n\nSame response schema as [List alert dismissal requests for secret scanning for an enterprise](#list-alert-dismissal-requests-for-secret-scanning-for-an-enterprise).\n\n## Get an alert dismissal request for secret scanning\n\n```\nGET /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}\n```\n\nGets a specific request to dismiss a secret scanning alert in a repository.\nDelegated alert dismissal must be enabled on the repository and the user must be an org admin, security manager,\nor have the \"Review and manage secret scanning alert dismissal requests\" permission to access this endpoint.\nPersonal access tokens (classic) need the security_events scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n- **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n- **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n- **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n- **`alert_number`** (integer) (required)\n  The number that identifies the secret scanning alert in a repository.\n\n### HTTP response status codes\n\n- **200** - A single dismissal request.\n\n- **403** - Forbidden\n\n- **404** - Resource not found\n\n- **500** - Internal Error\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/dismissal-requests/secret-scanning/ALERT_NUMBER\n```\n\n**Response schema (Status: 200):**\n\n* `id`: integer\n* `number`: integer\n* `repository`: object:\n  * `id`: integer\n  * `name`: string\n  * `full_name`: string\n* `organization`: object:\n  * `id`: integer\n  * `name`: string\n* `requester`: object:\n  * `actor_id`: integer\n  * `actor_name`: string\n* `request_type`: string\n* `data`: array of objects or null:\n  * `secret_type`: string\n  * `alert_number`: string\n  * `reason`: string, enum: `fixed_later`, `false_positive`, `tests`, `revoked`\n* `resource_identifier`: string\n* `status`: string, enum: `pending`, `denied`, `approved`, `cancelled`, `expired`\n* `requester_comment`: string or null\n* `expires_at`: string, format: date-time\n* `created_at`: string, format: date-time\n* `responses`: array of `Bypass response` or null:\n  * `id`: integer\n  * `reviewer`: object:\n    * `actor_id`: integer\n    * `actor_name`: string\n  * `status`: string, enum: `approved`, `denied`, `dismissed`\n  * `created_at`: string, format: date-time\n* `url`: string, format: uri\n* `html_url`: string, format: uri\n\n## Review an alert dismissal request for secret scanning\n\n```\nPATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}\n```\n\nApprove or deny a request to dismiss a secret scanning alert in a repository.\nDelegated alert dismissal must be enabled on the repository and the user must be an org admin, security manager,\nor have the \"Review and manage secret scanning alert dismissal requests\" permission to access this endpoint.\nPersonal access tokens (classic) need the security_events scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n- **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n- **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n- **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n- **`alert_number`** (integer) (required)\n  The number that identifies the secret scanning alert in a repository.\n\n#### Body parameters\n\n- **`status`** (string) (required)\n  The review action to perform on the dismissal request.\n  Can be one of: `approve`, `deny`\n\n- **`message`** (string) (required)\n  A message to include with the review. Has a maximum character length of 2048.\n\n### HTTP response status codes\n\n- **200** - The review of the dismissal request.\n\n- **403** - Forbidden\n\n- **404** - Resource not found\n\n- **422** - Validation failed, or the endpoint has been spammed.\n\n- **500** - Internal Error\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PATCH \\\n  https://api.github.com/repos/OWNER/REPO/dismissal-requests/secret-scanning/ALERT_NUMBER \\\n  -d '{\n  \"status\": \"deny\",\n  \"message\": \"This secret has not been revoked.\"\n}'\n```\n\n**Response schema (Status: 200):**\n\n* `dismissal_review_id`: integer"}