title | intro | permissions | versions | type | topics | shortTitle | ||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
Enabling delegated alert dismissal for code scanning |
You can use delegated alert dismissal to control who can dismiss an alert found by {% data variables.product.prodname_code_scanning %}. |
{% data reusables.permissions.delegated-alert-dismissal %} |
|
how_to |
|
Enable delegated alert dismissal |
{% data reusables.advanced-security.delegated-alert-dismissal-beta %}
{% data reusables.security.delegated-alert-dismissal-intro %}
[!NOTE] If an organization owner configures delegated alert dismissal via an enforced security configuration, the settings can't be changed at the repository level.
{% data reusables.repositories.navigate-to-repo %} {% data reusables.repositories.sidebar-settings %} {% data reusables.repositories.navigate-to-code-security-and-analysis %}{% ifversion ghas-products %}{% else %} {% data reusables.repositories.navigate-to-ghas-settings %}{% endif %}
- Under "{% data variables.product.UI_code_security_scanning %}", click Enable for "Prevent direct alert dismissals".
You must configure delegated dismissal for your organization using a custom security configuration. You can then apply the security configuration to all (or selected) repositories in your organization.
- Create a new custom security configuration, or edit an existing one. See AUTOTITLE.
- When creating the custom security configuration, under "{% data variables.product.prodname_code_scanning_caps %}", set "Prevent direct alert dismissals" to Enabled.
- Click Save configuration.
- Apply the security configuration to all (or selected) repositories in your organization. See AUTOTITLE.
To learn more about security configurations, see AUTOTITLE.