<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/secret-scanning-improvements-to-alert-apis-webhooks-and-delegated-workflows-n6rf0j1vg" -->

---
title: Secret scanning improvements to alert APIs, webhooks,...
description: GitHub is rolling out several improvements to its secret scanning features. New additions include an `exclude_secret_types` query parameter for the REST API,...
canonical: https://daily.dev/posts/secret-scanning-improvements-to-alert-apis-webhooks-and-delegated-workflows-n6rf0j1vg
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Secret scanning improvements to alert APIs, webhooks, and delegated workflows | daily.dev
og:description: GitHub is rolling out several improvements to its secret scanning features. New additions include an `exclude_secret_types` query parameter for the REST API,...
og:url: https://daily.dev/posts/secret-scanning-improvements-to-alert-apis-webhooks-and-delegated-workflows-n6rf0j1vg
og:image: https://api.daily.dev/og/posts/n6rf0J1Vg.png
og:image:alt: Secret scanning improvements to alert APIs, webhooks, and delegated workflows
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Secret scanning improvements to alert APIs, webhooks, and delegated workflows

**[GitHub Changelog](https://daily.dev/sources/github_updates)** · 5 min read · 0 upvotes · 0 comments

## Summary

GitHub is rolling out several improvements to its secret scanning features. New additions include an `exclude_secret_types` query parameter for the REST API, allowing exclusion-based filtering across repo, org, and enterprise alert endpoints. Alert location payloads now include an `html_url` field for direct browser-accessible links in both the API and webhooks. Delegated bypass email notifications now show expiry deadlines for reviewers and send confirmation emails to developers who submit dismissal requests. Three new fields (`closure_request_comment`, `closure_request_reviewer_comment`, `closure_request_reviewer`) are added to alert payloads for delegated closures. A bug fix ensures `resolution_comment` is no longer null when alerts are closed via delegated approval.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://github.blog/changelog/2026-04-08-secret-scanning-improvements-to-alert-apis-webhooks-and-delegated-workflows>

## Similar posts on daily.dev

- [Improvements to secret scanning and public monitoring](https://daily.dev/posts/improvements-to-secret-scanning-and-public-monitoring-1eimf68rz) · GitHub Changelog · 0 upvotes · 0 comments
- [Secret scanning alert assignees, security campaigns are generally available](https://daily.dev/posts/secret-scanning-alert-assignees-security-campaigns-are-generally-available-14dabpsax) · GitHub Changelog · 0 upvotes · 0 comments
- [Secret scanning coverage updates](https://daily.dev/posts/secret-scanning-coverage-updates-28bk7fqbt) · GitHub Changelog · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#rest-api](https://daily.dev/tags/rest-api)

[View this post on daily.dev](https://daily.dev/posts/secret-scanning-improvements-to-alert-apis-webhooks-and-delegated-workflows-n6rf0j1vg)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Secret scanning improvements to alert APIs, webhooks, and delegated workflows","url":"https://daily.dev/posts/secret-scanning-improvements-to-alert-apis-webhooks-and-delegated-workflows-n6rf0j1vg","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/secret-scanning-improvements-to-alert-apis-webhooks-and-delegated-workflows-n6rf0j1vg"},"datePublished":"2026-04-08T20:23:20.956Z","dateModified":"2026-04-08T20:23:41.671Z","description":"GitHub is rolling out several improvements to its secret scanning features. New additions include an `exclude_secret_types` query parameter for the REST API,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8ab84fdc81e71351c887e2f801bdc3fc?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8ab84fdc81e71351c887e2f801bdc3fc?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitHub Changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitHub Changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/15004b7835da4d89b02b115871f0f6dc","url":"https://daily.dev/sources/github_updates"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/secret-scanning-improvements-to-alert-apis-webhooks-and-delegated-workflows-n6rf0j1vg","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github,rest-api","timeRequired":"PT5M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitHub Changelog","item":"https://daily.dev/sources/github_updates"},{"@type":"ListItem","position":3,"name":"Secret scanning improvements to alert APIs, webhooks, and delegated workflows"}]}
```

