--- title: "Get a public monitoring alert for an enterprise" method: GET path: "/enterprises/{enterprise}/secret-scanning/public-monitoring-alerts/{alert_number}" tags: ["secret-scanning"] --- # Get a public monitoring alert for an enterprise `GET /enterprises/{enterprise}/secret-scanning/public-monitoring-alerts/{alert_number}` ## Request - Base URL: `https://api.github.com` - URL: `https://api.github.com/enterprises/{enterprise}/secret-scanning/public-monitoring-alerts/{alert_number}` - Auth: none declared Gets a single public monitoring alert for an enterprise. GitHub monitors secrets leaked across GitHub in real time. These findings may be associated with your enterprise. The authenticated user must be an enterprise owner or enterprise security manager. Public monitoring must be enabled for the enterprise. OAuth app tokens and personal access tokens (classic) must have the `repo` or `security_events` scope to use this endpoint. ## Path parameters - `enterprise` string, required - `alert_number` integer, required ## Response `200` Response - PublicMonitoringAlert - `number` integer, required: The enterprise-scoped public monitoring alert number. - `url` string, uri, required: The REST API URL of the alert resource. - `secret_type` string: The type of secret that secret scanning detected. - `secret_type_display_name` string: User-friendly name for the detected secret, matching the `secret_type`. For a list of built-in patterns, see "[Supported secret scanning patterns](https://docs.github.com/enterprise-cloud@latest/code-security/secret-scanning/introduction/supported-secret-scanning-patterns#supported-secrets)." - `validity` 'active' | 'inactive' | 'unknown': The validity status of the secret as of the latest validity check. - `created_at` string, date-time: The time that the secret was detected in ISO 8601 format. - `state` 'open' | 'resolved': Sets the state of the secret scanning alert. You must provide `resolution` when you set the state to `resolved`. - `resolution` 'dismissed' | 'fixed' | 'null', nullable: **Required when the `state` is `resolved`.** The reason for resolving the alert. - `resolved_by` NullableSimpleUser, nullable: A GitHub user. - `name` string, nullable - `email` string, nullable - `login` string, required - `id` integer, required - `node_id` string, required - `avatar_url` string, uri, required - `gravatar_id` string, nullable, required - `url` string, uri, required - `html_url` string, uri, required - `followers_url` string, uri, required - `following_url` string, required - `gists_url` string, required - `starred_url` string, required - `subscriptions_url` string, uri, required - `organizations_url` string, uri, required - `repos_url` string, uri, required - `events_url` string, required - `received_events_url` string, uri, required - `type` string, required - `site_admin` boolean, required - `starred_at` string - `user_view_type` string - `resolved_at` string, date-time, nullable: The time that the alert was resolved in ISO 8601 format: `YYYY-MM-DDTHH:MM:SSZ`. - `resolution_comment` string, nullable: An optional comment when resolving or reopening an alert. - `secret` string, nullable: The secret that was detected. - `repository` union - NullableSimpleRepository, nullable: A GitHub repository. - `id` integer, required: A unique identifier of the repository. - `node_id` string, required: The GraphQL identifier of the repository. - `name` string, required: The name of the repository. - `full_name` string, required: The full, globally unique, name of the repository. - `owner` SimpleUser, required: A GitHub user. - `name` string, nullable - `email` string, nullable - `login` string, required - `id` integer, required - `node_id` string, required - `avatar_url` string, uri, required - `gravatar_id` string, nullable, required - `url` string, uri, required - `html_url` string, uri, required - `followers_url` string, uri, required - `following_url` string, required - `gists_url` string, required - `starred_url` string, required - `subscriptions_url` string, uri, required - `organizations_url` string, uri, required - `repos_url` string, uri, required - `events_url` string, required - `received_events_url` string, uri, required - `type` string, required - `site_admin` boolean, required - `starred_at` string - `user_view_type` string - `private` boolean, required: Whether the repository is private. - `html_url` string, uri, required: The URL to view the repository on GitHub.com. - `description` string, nullable, required: The repository description. - `fork` boolean, required: Whether the repository is a fork. - `url` string, uri, required: The URL to get more information about the repository from the GitHub API. - `archive_url` string, required: A template for the API URL to download the repository as an archive. - `assignees_url` string, required: A template for the API URL to list the available assignees for issues in the repository. - `blobs_url` string, required: A template for the API URL to create or retrieve a raw Git blob in the repository. - `branches_url` string, required: A template for the API URL to get information about branches in the repository. - `collaborators_url` string, required: A template for the API URL to get information about collaborators of the repository. - `comments_url` string, required: A template for the API URL to get information about comments on the repository. - `commits_url` string, required: A template for the API URL to get information about commits on the repository. - `compare_url` string, required: A template for the API URL to compare two commits or refs. - `contents_url` string, required: A template for the API URL to get the contents of the repository. - `contributors_url` string, uri, required: A template for the API URL to list the contributors to the repository. - `deployments_url` string, uri, required: The API URL to list the deployments of the repository. - `downloads_url` string, uri, required: The API URL to list the downloads on the repository. - `events_url` string, uri, required: The API URL to list the events of the repository. - `forks_url` string, uri, required: The API URL to list the forks of the repository. - `git_commits_url` string, required: A template for the API URL to get information about Git commits of the repository. - `git_refs_url` string, required: A template for the API URL to get information about Git refs of the repository. - `git_tags_url` string, required: A template for the API URL to get information about Git tags of the repository. - `issue_comment_url` string, required: A template for the API URL to get information about issue comments on the repository. - `issue_events_url` string, required: A template for the API URL to get information about issue events on the repository. - `issues_url` string, required: A template for the API URL to get information about issues on the repository. - `keys_url` string, required: A template for the API URL to get information about deploy keys on the repository. - `labels_url` string, required: A template for the API URL to get information about labels of the repository. - `languages_url` string, uri, required: The API URL to get information about the languages of the repository. - `merges_url` string, uri, required: The API URL to merge branches in the repository. - `milestones_url` string, required: A template for the API URL to get information about milestones of the repository. - `notifications_url` string, required: A template for the API URL to get information about notifications on the repository. - `pulls_url` string, required: A template for the API URL to get information about pull requests on the repository. - `releases_url` string, required: A template for the API URL to get information about releases on the repository. - `stargazers_url` string, uri, required: The API URL to list the stargazers on the repository. - `statuses_url` string, required: A template for the API URL to get information about statuses of a commit. - `subscribers_url` string, uri, required: The API URL to list the subscribers on the repository. - `subscription_url` string, uri, required: The API URL to subscribe to notifications for this repository. - `tags_url` string, uri, required: The API URL to get information about tags on the repository. - `teams_url` string, uri, required: The API URL to list the teams on the repository. - `trees_url` string, required: A template for the API URL to create or retrieve a raw Git tree of the repository. - `hooks_url` string, uri, required: The API URL to list the hooks on the repository. - PublicMonitoringRepository: Delivered details for the public repository where the secret was found. - `name` string, required - `full_name` string, required - `private` boolean, required - `html_url` string, uri, nullable - `gist` union: The gist the secret was found in. - NullableBaseGist, nullable: Base Gist - `url` string, uri, required - `forks_url` string, uri, required - `commits_url` string, uri, required - `id` string, required - `node_id` string, required - `git_pull_url` string, uri, required - `git_push_url` string, uri, required - `html_url` string, uri, required - `files` object, required - `public` boolean, required - `created_at` string, date-time, required - `updated_at` string, date-time, required - `description` string, nullable, required - `comments` integer, required - `comments_enabled` boolean - `user` NullableSimpleUser, nullable, required: A GitHub user. - `name` string, nullable - `email` string, nullable - `login` string, required - `id` integer, required - `node_id` string, required - `avatar_url` string, uri, required - `gravatar_id` string, nullable, required - `url` string, uri, required - `html_url` string, uri, required - `followers_url` string, uri, required - `following_url` string, required - `gists_url` string, required - `starred_url` string, required - `subscriptions_url` string, uri, required - `organizations_url` string, uri, required - `repos_url` string, uri, required - `events_url` string, required - `received_events_url` string, uri, required - `type` string, required - `site_admin` boolean, required - `starred_at` string - `user_view_type` string - `comments_url` string, uri, required - `owner` SimpleUser: A GitHub user. - `name` string, nullable - `email` string, nullable - `login` string, required - `id` integer, required - `node_id` string, required - `avatar_url` string, uri, required - `gravatar_id` string, nullable, required - `url` string, uri, required - `html_url` string, uri, required - `followers_url` string, uri, required - `following_url` string, required - `gists_url` string, required - `starred_url` string, required - `subscriptions_url` string, uri, required - `organizations_url` string, uri, required - `repos_url` string, uri, required - `events_url` string, required - `received_events_url` string, uri, required - `type` string, required - `site_admin` boolean, required - `starred_at` string - `user_view_type` string - `truncated` boolean - `forks` unknown[] - unknown - `history` unknown[] - unknown - object - `id` string, required - `html_url` string, uri, nullable - `attribution` object: Attribution information for the alert. - `secret_author` union - NullableSimpleUser, nullable: A GitHub user. - `name` string, nullable - `email` string, nullable - `login` string, required - `id` integer, required - `node_id` string, required - `avatar_url` string, uri, required - `gravatar_id` string, nullable, required - `url` string, uri, required - `html_url` string, uri, required - `followers_url` string, uri, required - `following_url` string, required - `gists_url` string, required - `starred_url` string, required - `subscriptions_url` string, uri, required - `organizations_url` string, uri, required - `repos_url` string, uri, required - `events_url` string, required - `received_events_url` string, uri, required - `type` string, required - `site_admin` boolean, required - `starred_at` string - `user_view_type` string - PublicMonitoringSecretAuthor: Delivered public details for the user attributed as the secret author. - `login` string, required - `avatar_url` string, uri, nullable - `html_url` string, uri, nullable - `committer_email` string, nullable: The email address associated with the secret's author. - `method` 'member_activity' | 'verified_domain': The method used to attribute the alert to the enterprise. - `commit` union - SecretScanningLocationCommit: Represents a 'commit' secret scanning location type. This location type shows that a secret was detected inside a commit to a repository. - `path` string, required: The file path in the repository - `start_line` number, required: Line number at which the secret starts in the file - `end_line` number, required: Line number at which the secret ends in the file - `start_column` number, required: The column at which the secret starts within the start line when the file is interpreted as 8BIT ASCII - `end_column` number, required: The column at which the secret ends within the end line when the file is interpreted as 8BIT ASCII - `blob_sha` string, required: SHA-1 hash ID of the associated blob - `blob_url` string, required: The API URL to get the associated blob resource - `commit_sha` string, required: SHA-1 hash ID of the associated commit - `commit_url` string, required: The API URL to get the associated commit resource - `html_url` string, uri: The GitHub URL to get the associated commit resource. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `wiki_commit` union - SecretScanningLocationWikiCommit: Represents a 'wiki_commit' secret scanning location type. This location type shows that a secret was detected inside a commit to a repository wiki. - `path` string, required: The file path of the wiki page - `start_line` number, required: Line number at which the secret starts in the file - `end_line` number, required: Line number at which the secret ends in the file - `start_column` number, required: The column at which the secret starts within the start line when the file is interpreted as 8-bit ASCII. - `end_column` number, required: The column at which the secret ends within the end line when the file is interpreted as 8-bit ASCII. - `blob_sha` string, required: SHA-1 hash ID of the associated blob - `page_url` string, required: The GitHub URL to get the associated wiki page - `commit_sha` string, required: SHA-1 hash ID of the associated commit - `commit_url` string, required: The GitHub URL to get the associated wiki commit - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `issue_title` union - SecretScanningLocationIssueTitle: Represents an 'issue_title' secret scanning location type. This location type shows that a secret was detected in the title of an issue. - `issue_title_url` string, uri, required: The API URL to get the issue where the secret was detected. - `html_url` string, uri: The GitHub URL for the issue where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `issue_body` union - SecretScanningLocationIssueBody: Represents an 'issue_body' secret scanning location type. This location type shows that a secret was detected in the body of an issue. - `issue_body_url` string, uri, required: The API URL to get the issue where the secret was detected. - `html_url` string, uri: The GitHub URL for the issue where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `issue_comment` union - SecretScanningLocationIssueComment: Represents an 'issue_comment' secret scanning location type. This location type shows that a secret was detected in a comment on an issue. - `issue_comment_url` string, uri, required: The API URL to get the issue comment where the secret was detected. - `html_url` string, uri: The GitHub URL for the issue comment where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `pull_request_title` union - SecretScanningLocationPullRequestTitle: Represents a 'pull_request_title' secret scanning location type. This location type shows that a secret was detected in the title of a pull request. - `pull_request_title_url` string, uri, required: The API URL to get the pull request where the secret was detected. - `html_url` string, uri: The GitHub URL for the pull request where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `pull_request_body` union - SecretScanningLocationPullRequestBody: Represents a 'pull_request_body' secret scanning location type. This location type shows that a secret was detected in the body of a pull request. - `pull_request_body_url` string, uri, required: The API URL to get the pull request where the secret was detected. - `html_url` string, uri: The GitHub URL for the pull request where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `pull_request_comment` union - SecretScanningLocationPullRequestComment: Represents a 'pull_request_comment' secret scanning location type. This location type shows that a secret was detected in a comment on a pull request. - `pull_request_comment_url` string, uri, required: The API URL to get the pull request comment where the secret was detected. - `html_url` string, uri: The GitHub URL for the pull request comment where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `pull_request_review_comment` union - SecretScanningLocationPullRequestReviewComment: Represents a 'pull_request_review_comment' secret scanning location type. This location type shows that a secret was detected in a review comment on a pull request. - `pull_request_review_comment_url` string, uri, required: The API URL to get the pull request review comment where the secret was detected. - `html_url` string, uri: The GitHub URL for the pull request review comment where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `pull_request_review` union - SecretScanningLocationPullRequestReview: Represents a 'pull_request_review' secret scanning location type. This location type shows that a secret was detected in a review on a pull request. - `pull_request_review_url` string, uri, required: The API URL to get the pull request review where the secret was detected. - `html_url` string, uri: The GitHub URL for the pull request review where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `pull_request_timeline_comment` PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `discussion_title` union - SecretScanningLocationDiscussionTitle: Represents a 'discussion_title' secret scanning location type. This location type shows that a secret was detected in the title of a discussion. - `discussion_title_url` string, uri, required: The URL to the discussion where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `discussion_body` union - SecretScanningLocationDiscussionBody: Represents a 'discussion_body' secret scanning location type. This location type shows that a secret was detected in the body of a discussion. - `discussion_body_url` string, uri, required: The URL to the discussion where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `discussion_comment` union - SecretScanningLocationDiscussionComment: Represents a 'discussion_comment' secret scanning location type. This location type shows that a secret was detected in a comment on a discussion. - `discussion_comment_url` string, uri, required: The API URL to get the discussion comment where the secret was detected. - PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `commit_metadata` PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `commit_comment` PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `actions_log` PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer - `gist_blob` PublicMonitoringAlertLocation: Delivered source location details for a public monitoring alert. - `path` string - `start_line` integer - `end_line` integer - `start_column` integer - `end_column` integer - `blob_sha` string - `commit_sha` string - `html_url` string, uri - `content_number` integer - `content_id` integer ## Other responses - `400`: Bad Request - `403`: Forbidden - `404`: Resource not found - `500`: Internal Error - `503`: Service unavailable ## Changes - **2026-10-27** `2bbf5140540d`: 1 info - endpoint added [Operation history](https://skmtc.dev/github/apis/enterprise-cloud/changes/enterprises/:enterprise/secret-scanning/public-monitoring-alerts/:alert_number/get.md) --- [API](https://skmtc.dev/github/apis/enterprise-cloud.md) - [All operations](https://skmtc.dev/github/apis/enterprise-cloud/llms.txt) - [OpenAPI document](https://skmtc.dev/github/apis/enterprise-cloud/revisions/3b55ce443f5c?raw)