Question

An organization has assigned the built-in Security Manager role to its AppSec team. A separate group of application developers has Write access to several repositories in the org. During an incident review, the CISO asks which group is able to dismiss Dependabot and code scanning alerts across ALL repositories in the organization without being granted per-repository access. Which statement correctly describes the capabilities of these roles?

Accepted Answer

The Security Manager role grants org-wide read access to alerts and the ability to view and dismiss security alerts across every repository in the organization; Write-access developers can only dismiss alerts in repositories where they have that access.

Answer

Both the Security Manager role and Write-access developers can dismiss alerts across all repositories in the organization, since alert dismissal is an organization-level permission.

Answer

Only Write-access developers can dismiss alerts; the Security Manager role is read-only and can never change alert states.

Answer

Neither role can dismiss alerts organization-wide; only enterprise owners can dismiss alerts across all repositories in an organization.