docs/content/code-security/security-overview/reviewing-requests-to-bypass-push-protection.md

title, shortTitle, intro, permissions, product, type, topics, versions

title	shortTitle	intro	permissions	product	type	topics	versions
Reviewing requests to bypass push protection	Review bypass requests	You can use security overview to review requests to bypass push protection from contributors pushing to repositories across your organization.	{% data reusables.permissions.security-overview %}	{% data reusables.gated-features.security-overview-fpt-sp-only %}	how_to	Security overview Secret Protection Organizations Teams Secret scanning Alerts	feature security-overview-delegated-bypass-requests

About bypass requests

If your organization has configured delegated bypass for push protection, a designated team of reviewers controls which organization members can push secrets to repositories in your organization, and which members must first make a "bypass request" in order to push the secret.

On the "Push protection bypass" page in security overview, reviewers can find, review (approve or deny) and manage these requests.

For more information, see AUTOTITLE.

Reviewing bypass requests for an organization

{% data reusables.organizations.navigate-to-org %} {% data reusables.organizations.security-overview %}

1. In the sidebar, under "Requests", click {% octicon "key" aria-hidden="true" aria-label="key" %} Push protection bypass.
2. Select the All statuses dropdown menu, then click Open to view requests that are awaiting review, or that have been approved but for which the commits haven't been pushed to the repository yet.
3. Click the request that you want to review.
4. Review the details of the request. {% ifversion push-protection-bypass-reviewer-comment -%} {% data reusables.repositories.bypass-requests-reviewer-comment %} {%- endif %}
5. To allow the contributor to push the commit containing the secret, click Approve bypass request. Or, to require the contributor to remove the secret from the commit, click Deny bypass request.

Filtering requests

You can filter requests by repository, approver (member who has reviewed the request), requester (contributor making the request), timeframe, and status.

Filtering by status

The following statuses are assigned to a request:

Status	Description
{% ifversion fpt or ghec or ghes > 3.16 %}
Approved	The request has been approved, but the commit(s) have not yet been pushed to the repository.
{% endif %}
Cancelled	The request has been cancelled by the contributor.
Completed	The request has been approved and the commit(s) have been pushed to the repository{% ifversion fpt or ghec or ghes > 3.16 %}, or the request was rejected{% endif %}.
Denied	The request has been reviewed and denied.
Expired	The request has expired. Requests are valid for 7 days.
Open	The request has {% ifversion ghes < 3.17 %}either not yet been reviewed, or has been approved but the commit(s) have not been pushed to the repository{% else %}not yet been reviewed{% endif %}.

Further reading

• AUTOTITLE
• AUTOTITLE