---
title: "List alert dismissal requests for secret scanning for an enterprise"
method: GET
path: "/enterprises/{enterprise}/dismissal-requests/secret-scanning"
tags: ["secret-scanning"]
---

# List alert dismissal requests for secret scanning for an enterprise

`GET /enterprises/{enterprise}/dismissal-requests/secret-scanning`

Lists requests to dismiss secret scanning alerts in an enterprise.

The authenticated user must be an enterprise owner or an enterprise security manager to access this endpoint.
Personal access tokens (classic) need the `security_events` scope to use this endpoint.

## Path parameters

- `enterprise` string, required

## Query parameters

- `organization_name` string
- `reviewer` string
- `requester` string
- `time_period` 'hour' | 'day' | 'week' | 'month'
- `request_status` 'completed' | 'cancelled' | 'approved' | 'expired' | 'denied' | 'open' | 'all'
- `per_page` integer
- `page` integer

## Response `200`

A list of the alert dismissal requests.

- SecretScanningDismissalRequest[]
  - `id` integer — The unique identifier of the dismissal request.
  - `number` integer — The number uniquely identifying the dismissal request within its repository.
  - `repository` object — The repository the dismissal request is for.
    - `id` integer — The ID of the repository the dismissal request is for.
    - `name` string — The name of the repository the dismissal request is for.
    - `full_name` string — The full name of the repository the dismissal request is for.
  - `organization` object — The organization associated with the repository the dismissal request is for.
    - `id` integer — The ID of the organization.
    - `name` string — The name of the organization.
  - `requester` object — The user who requested the dismissal.
    - `actor_id` integer — The ID of the GitHub user who requested the dismissal.
    - `actor_name` string — The name of the GitHub user who requested the dismissal.
  - `request_type` string — The type of request.
  - `data` object[], nullable — Data describing the secret alert that is being requested to be dismissed.
    - `secret_type` string — The type of secret that secret scanning detected.
    - `alert_number` string — The number of the secret scanning alert that was detected.
    - `reason` 'fixed_later' | 'false_positive' | 'tests' | 'revoked' — The reason the user provided for requesting the dismissal.
  - `resource_identifier` string — The number of the secret scanning alert that was detected.
  - `status` 'pending' | 'denied' | 'approved' | 'cancelled' | 'expired' — The status of the dismissal request.
  - `requester_comment` string, nullable — The comment the requester provided when creating the dismissal request.
  - `expires_at` string, date-time — The date and time the dismissal request will expire.
  - `created_at` string, date-time — The date and time the dismissal request was created.
  - `responses` BypassResponse[], nullable — The responses to the dismissal request.
    - `id` integer — The ID of the response to the bypass request.
    - `reviewer` object — The user who reviewed the bypass request.
      - `actor_id` integer — The ID of the GitHub user who reviewed the bypass request.
      - `actor_name` string — The name of the GitHub user who reviewed the bypass request.
    - `status` 'approved' | 'denied' | 'dismissed' — The response status to the bypass request until dismissed.
    - `created_at` string, date-time — The date and time the response to the bypass request was created.
  - `url` string, uri
  - `html_url` string, uri — The URL to view the dismissal request in a browser.

## Other responses

- `403` — Forbidden
- `404` — Resource not found
- `500` — Internal Error

---

[API](https://skmtc.net/github/apis/github-v3-rest-api-2.md) · [All operations](https://skmtc.net/github/apis/github-v3-rest-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/github-v3-rest-api-2/versions/8ae6d0c8716e/schema)
