---
title: "Review an alert dismissal request for secret scanning"
method: PATCH
path: "/repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}"
tags: ["secret-scanning"]
---

# Review an alert dismissal request for secret scanning

`PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}`

Approve or deny a request to dismiss a secret scanning alert in a repository.

Delegated alert dismissal must be enabled on the repository and the user must be an org admin, security manager,
or have the "Review and manage secret scanning alert dismissal requests" permission to access this endpoint.
Personal access tokens (classic) need the `security_events` scope to use this endpoint.

## Path parameters

- `owner` string, required
- `repo` string, required
- `alert_number` integer, required

## Request body

- object
  - `status` 'approve' | 'deny', required — The review action to perform on the dismissal request.
  - `message` string, required — A message to include with the review. Has a maximum character length of 2048.

## Response `200`

The review of the dismissal request.

- object
  - `dismissal_review_id` integer — ID of the dismissal review.

## Other responses

- `403` — Forbidden
- `404` — Resource not found
- `422` — Validation failed, or the endpoint has been spammed.
- `500` — Internal Error

---

[API](https://skmtc.net/github/apis/github-v3-rest-api-2.md) · [All operations](https://skmtc.net/github/apis/github-v3-rest-api-2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/github-v3-rest-api-2/versions/8ae6d0c8716e/schema)