For the secret scanning alerts list view specifically, Admin is the correct choice among the supplied roles. GitHub distinguishes between being able to access information about a particular secret associated with your own commits and having access to the repository-wide secret scanning alert list. GitHub's repository-role documentation notes that users with Write or Maintain roles can directly view secret-scanning information associated with their own commits but cannot access the full alert-list view under the standard role model. Repository administrators have the broader security visibility needed for the complete list. Read access is insufficient, while “repository owner” is not a standard repository role for organization-owned repositories. Additional users can also receive alert access when explicitly granted it by an organization owner or repository administrator.