v56

latestOpenAPI 3.0.3MITraw.githubusercontent.com2026-08-011,4581,08113.3 MB

secret-scanning

Create a push protection bypass

Creates a bypass for a previously push protected secret.

The authenticated user must be the original author of the committed secret.

OAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.

post/repos/{owner}/{repo}/secret-scanning/push-protection-bypasses

ownerstring required

The account owner of the repository. The name is not case sensitive.

repostring required

The name of the repository without the .git extension. The name is not case sensitive.

reason'false_positive' | 'used_in_tests' | 'will_fix_later' required

The reason for bypassing push protection.

placeholder_idstring required

The ID of the push protection bypass placeholder. This value is returned on any push protected routes.

reason'false_positive' | 'used_in_tests' | 'will_fix_later'

The reason for bypassing push protection.

expire_atstring date-time nullable

The time that the bypass will expire in ISO 8601 format: YYYY-MM-DDTHH:MM:SSZ.

token_typestring

The token type this bypass is for.