Skip to content

Latest commit

 

History

History
40 lines (30 loc) · 2.34 KB

enabling-delegated-alert-dismissal-for-secret-scanning.md

File metadata and controls

40 lines (30 loc) · 2.34 KB
title intro permissions versions type topics shortTitle
Enabling delegated alert dismissal for secret scanning
You can use delegated alert dismissal to control who can dismiss an alert found by {% data variables.product.prodname_secret_scanning %}.
{% data reusables.permissions.delegated-alert-dismissal %}
feature
security-delegated-alert-dismissal
how_to
Secret scanning
Advanced Security
Alerts
Repositories
Delegated alert dismissal

About enabling delegated alert dismissal

{% data reusables.advanced-security.delegated-alert-dismissal-beta %}

{% data reusables.security.delegated-alert-dismissal-intro %}

Configuring delegated dismissal for a repository

[!NOTE] If an organization owner configures delegated alert dismissal via an enforced security configuration, the settings can't be changed at the repository level.

{% data reusables.repositories.navigate-to-repo %} {% data reusables.repositories.sidebar-settings %} {% data reusables.repositories.navigate-to-code-security-and-analysis %}

  1. Under "{% data variables.product.prodname_secret_protection %}", to the right of "Prevent direct alert dismissals", click Enable.

Configuring delegated dismissal for an organization

You must configure delegated dismissal for your organization using a custom security configuration. You can then apply the security configuration to all (or selected) repositories in your organization.

  1. Create a new custom security configuration, or edit an existing one. See AUTOTITLE.
  2. When defining the custom security configuration, under "{% data variables.product.prodname_secret_scanning_caps %}", ensure that the dropdown menu for "Prevent direct alert dismissals" is set to Enabled.
  3. Click Save configuration.
  4. Apply the security configuration to all (or selected) repositories in your organization. See AUTOTITLE.

To learn more about security configurations, see AUTOTITLE.