---
title: "Review a bypass request for secret scanning"
method: PATCH
path: "/repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}"
tags: ["secret-scanning"]
---

# Review a bypass request for secret scanning

`PATCH /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}`

Approve or deny a request to bypass secret scanning push protection in a repository.

Delegated bypass must be enabled on the repository and the user must be a bypass reviewer to access this endpoint.
Personal access tokens (classic) need the `security_events` scope to use this endpoint.

## Path parameters

- `owner` string, required
- `repo` string, required
- `bypass_request_number` integer, required

## Request body

- object
  - `status` 'approve' | 'reject', required — The review action to perform on the bypass request.
  - `message` string, required — A message to include with the review. Has a maximum character length of 2048.

## Response `200`

The review of the bypass request.

- object
  - `bypass_review_id` integer — ID of the bypass review.

## Other responses

- `403` — Forbidden
- `404` — Resource not found
- `422` — Validation failed, or the endpoint has been spammed.
- `500` — Internal Error

---

[API](https://skmtc.net/github/apis/enterprise-cloud.md) · [All operations](https://skmtc.net/github/apis/enterprise-cloud/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/enterprise-cloud/revisions/daeba3129b5f/schema)