# secret_scanning_push_protection_enabled_for_new_repositories on PATCH /orgs/{} stops working

Calls to PATCH /orgs/{id}, body parameter secret_scanning_push_protection_enabled_for_new_repositories on GitHub REST API stopped working on April 21, 2026.

On April 21, 2026, the secret_scanning_push_protection_enabled_for_new_repositories body parameter was removed from the PATCH /orgs/{id} endpoint. Calls that send this parameter fail since that date. Scripts and integrations reading or writing this field are no longer supported.

## What to use instead

Use code security configurations via /orgs/{org}/code-security/configurations and set a default configuration for new repositories.

- API: GitHub REST API (api.github.com)
- Kind: Parameter removal
- Announced: March 24, 2026
- Takes effect: April 21, 2026
- Calls after that day: fail
- Calls it hits: `PATCH /orgs/{id}`, `body parameter secret_scanning_push_protection_enabled_for_new_repositories`
- Source: [Announcement](https://github.blog/changelog/2026-03-24-upcoming-deprecation-of-security-related-organization-api-fields)
- Verified: November 6, 2026, against GitHub REST API's own pages
- Page: https://www.okapi.bot/providers/github-rest-api/breaking-changes/secret-scanning-push-protection-enabled-for-new-repositories-on-patch-orgs/

## GitHub REST API's words

> Update any scripts or integrations that read or write these fields, as they’ll no longer be available after April 21, 2026.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent