---
title: "Reopen a public secret incident"
method: POST
path: "/v1/public-incidents/secrets/{incident_id}/reopen"
tags: ["Public Secret Incidents"]
---

# Reopen a public secret incident

`POST /v1/public-incidents/secrets/{incident_id}/reopen`

## Request

- Base URL: `https://api.gitguardian.com`
- URL: `https://api.gitguardian.com/v1/public-incidents/secrets/{incident_id}/reopen`
- Auth: HTTP bearer

Reopen a public secret incident that was previously resolved or ignored.

## Path parameters

- `incident_id` integer, required

## Response `200`

Public Secret Incident Details

- object
  - `id` integer
  - `detector` object
    - `name` string, required
    - `display_name` string, required
    - `nature` string, required
    - `family` string
    - `category` string
    - `detector_group_name` string
    - `detector_group_display_name` string
  - `date` string, date-time
  - `secret_id` integer
  - `secret_hash` string
  - `hmsl_hash` string
  - `occurrences_count` integer
  - `status` 'IGNORED' | 'TRIGGERED' | 'ASSIGNED' | 'RESOLVED'
  - `triggered_at` string, date-time
  - `ignored_at` string, date-time, nullable
  - `ignore_reason` 'test_credential' | 'false_positive' | 'low_risk' | 'invalid' | 'ignore_actor' | 'ignore_secret', nullable: Comma-separated list of the reasons why the incident was ignored.
  - `ignorer_id` integer, nullable
  - `ignorer_api_token_id` string, uuid, nullable
  - `resolved_at` string, date-time, nullable
  - `resolver_id` integer, nullable
  - `resolver_api_token_id` string, uuid, nullable
  - `secret_revoked` boolean
  - `validity` 'valid' | 'invalid' | 'failed_to_check' | 'no_checker' | 'unknown'
  - `severity` 'critical' | 'high' | 'medium' | 'low' | 'info' | 'unknown'
  - `assignee_id` integer, nullable
  - `assignee_email` string, nullable
  - `share_url` string, nullable
  - `feedback_list` object[]
    - `created_at` string, date-time
    - `updated_at` string, date-time
    - `member_id` integer, nullable: Only if the feedback has been provided from the dashboard.
    - `email` string: Feedback author's e-mail address
    - `answers` union[]
      - union
        - object
          - `type` 'boolean': The value's type for this field.
          - `field_ref` string: The field's unique reference.
          - `field_label` string: The field's name or question.
          - `boolean` boolean: The value provided for this field in the feedback.
        - object
          - `type` 'text': The value's type for this field.
          - `field_ref` string: The field's unique reference.
          - `field_label` string: The field's name or question.
          - `text` string: The value provided for this field in the feedback.
  - `declarative_secret_status` 'revoked' | 'active' | 'test_credential' | 'false_positive' | 'low_risk'
  - `resolve_reason` 'revoked' | 'dmca_request' | 'source_deleted', nullable: Comma-separated list of the reasons why the incident was resolved.
  - `gitguardian_url` string
  - `tags` string[]
  - `custom_tags` object[]
    - `id` string, uuid
    - `key` string
    - `value` string, nullable
  - `risk_score` integer, nullable: Risk score of the incident, from 0 (low) to 100 (critical). Null when not yet computed.
  - `severity_rule_id` integer, nullable: ID of the severity rule that set this incident's severity. Null if severity was not set by a rule or was manually overridden.
  - `incident_name` string: Human-readable name combining detector information
  - `is_vaulted` boolean, nullable: Indicates whether this secret is stored in a vault (NHI observability feature)

## Other responses

- `400`: Invalid data
- `401`: Invalid API key
- `409`: Data conflict
- `503`: API under maintenance

## Changes

- **2026-10-30** `0066824283bd`: 1 warning
  - added the new `HONEYTOKEN` enum value to the `tags/items/` response property for the response status `200`
- **2026-08-26** `78197a8c12fd`: 1 breaking
  - the response property `risk_score` became nullable for the status `200`

[Operation history](https://skmtc.dev/gitguardian/apis/gitguardian-api/changes/v1/public-incidents/secrets/:incident_id/reopen/post.md)

---

[API](https://skmtc.dev/gitguardian/apis/gitguardian-api.md) - [All operations](https://skmtc.dev/gitguardian/apis/gitguardian-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gitguardian/apis/gitguardian-api/revisions/5829df7b9045?raw)