---
title: "List alert dismissal requests for secret scanning for an org"
method: GET
path: "/orgs/{org}/dismissal-requests/secret-scanning"
tags: ["secret-scanning"]
---

# List alert dismissal requests for secret scanning for an org

`GET /orgs/{org}/dismissal-requests/secret-scanning`

Lists requests to dismiss secret scanning alerts in an org.

Delegated alert dismissal must be enabled on repositories in the org and the user must be an org admin, security manager,
or have the "Review and manage secret scanning alert dismissal requests" permission to access this endpoint.

## Path parameters

- `org` string, required

## Query parameters

- `repository_name` string
- `reviewer` string
- `requester` string
- `time_period` 'hour' | 'day' | 'week' | 'month'
- `request_status` 'completed' | 'cancelled' | 'approved' | 'expired' | 'denied' | 'open' | 'all'
- `per_page` integer
- `page` integer

## Response `200`

A list of the alert dismissal requests.

- SecretScanningDismissalRequest[]
  - `id` integer — The unique identifier of the dismissal request.
  - `number` integer — The number uniquely identifying the dismissal request within its repository.
  - `repository` object — The repository the dismissal request is for.
    - `id` integer — The ID of the repository the dismissal request is for.
    - `name` string — The name of the repository the dismissal request is for.
    - `full_name` string — The full name of the repository the dismissal request is for.
  - `organization` object — The organization associated with the repository the dismissal request is for.
    - `id` integer — The ID of the organization.
    - `name` string — The name of the organization.
  - `requester` object — The user who requested the dismissal.
    - `actor_id` integer — The ID of the GitHub user who requested the dismissal.
    - `actor_name` string — The name of the GitHub user who requested the dismissal.
  - `request_type` string — The type of request.
  - `data` object[], nullable — Data describing the secret alert that is being requested to be dismissed.
    - `secret_type` string — The type of secret that secret scanning detected.
    - `alert_number` string — The number of the secret scanning alert that was detected.
    - `reason` 'fixed_later' | 'false_positive' | 'tests' | 'revoked' — The reason the user provided for requesting the dismissal.
  - `resource_identifier` string — The number of the secret scanning alert that was detected.
  - `status` 'pending' | 'denied' | 'approved' | 'cancelled' | 'expired' — The status of the dismissal request.
  - `requester_comment` string, nullable — The comment the requester provided when creating the dismissal request.
  - `expires_at` string, date-time — The date and time the dismissal request will expire.
  - `created_at` string, date-time — The date and time the dismissal request was created.
  - `responses` BypassResponse[], nullable — The responses to the dismissal request.
    - `id` integer — The ID of the response to the bypass request.
    - `reviewer` object — The user who reviewed the bypass request.
      - `actor_id` integer — The ID of the GitHub user who reviewed the bypass request.
      - `actor_name` string — The name of the GitHub user who reviewed the bypass request.
    - `status` 'approved' | 'denied' | 'dismissed' — The response status to the bypass request until dismissed.
    - `created_at` string, date-time — The date and time the response to the bypass request was created.
  - `url` string, uri
  - `html_url` string, uri — The URL to view the dismissal request in a browser.

## Other responses

- `403` — Forbidden
- `404` — Resource not found
- `500` — Internal Error

---

[API](https://skmtc.net/github/apis/github-v3-rest-api-2.md) · [All operations](https://skmtc.net/github/apis/github-v3-rest-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/github-v3-rest-api-2/versions/8ae6d0c8716e/schema)