アラート却下リクエストの確認

アラート解除リクエストを定期的に確認して、組織や企業内のセキュリティアラートをトリアージし、解決します。

この機能を使用できるユーザーについて

アクセスには以下が必要です。

  • 組織ビュー: 組織内のリポジトリへの書き込みアクセス
  • エンタープライズ ビュー: 組織の所有者とセキュリティ マネージャー

Organizations or enterprises with GitHub Secret Protection, GitHub Code Security, or GitHub Advanced Security

この記事の内容

Prerequisites

To receive and manage alert dismissal requests, you need to enable delegated alert dismissal. For an introduction to delegated alert dismissal and enablement instructions for specific features, see:

Reviewing requests for an organization

  1. On GitHub, navigate to the main page of the organization.

  2. Under your organization name, click Security.

    Screenshot of the horizontal navigation bar for an organization. A tab, labeled with a shield icon and "Security," is outlined in dark orange.

  3. In the "Requests" section of the sidebar, click any of the following options to review alert dismissal requests for the relevant feature:

    • Secret scanning alert dismissal
    • Code scanning alert dismissal

  4. Optionally, to filter requests by source repository, reviewer, requester, timeframe, or status, use the dropdown menus at the top of the list of requests.

  5. Click the request you want to review.

  6. Read the contents of the alert, as well as the requester's reasoning for the dismissal request.

  7. Next to the dismissal request in the alert timeline, click Review request.

  8. Provide any comments for the requester in the text box, then select either Deny request or Approve request.

  9. Click Submit review.

Reviewing requests across your enterprise

メモ

To review an alert dismissal request at the enterprise level, you must be an organization owner or security manager for the source organization, or be granted the necessary permissions through a custom role.

  1. In the top-right corner of GitHub Enterprise Server, click your profile picture, then click Enterprise settings.
  2. At the top of the page, click Security.
  3. In the "Requests" section of the sidebar, click any of the following options to review alert dismissal requests for the relevant feature:
    • Secret scanning alert dismissal
    • Code scanning alert dismissal
  4. Optionally, to filter requests by source organization, reviewer, requester, timeframe, or status, use the dropdown menus at the top of the list of requests.
  5. Click the request you want to review.
  6. Read the contents of the alert, as well as the requester's reasoning for the dismissal request.
  7. Next to the dismissal request in the alert timeline, click Review request.
  8. Provide any comments for the requester in the text box, then select either Deny request or Approve request.
  9. Click Submit review.