> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Arnica

> Connect Arnica to import code security posture and supply chain findings into Tierity, including hardcoded secrets, risky code changes, and developer risk signals.

## Overview

Arnica is a code security posture management (CSPM) platform focused on developer-centric risk signals: hardcoded secrets, risky code changes, overprivileged tokens, and supply chain threats. The Tierity integration pulls Arnica findings into your organization for consolidated review.

## Prerequisites

* An [Arnica](https://www.arnica.io) account
* An Arnica API token with read access
* Your Arnica organization ID
* Manage access (or higher) in Tierity to configure the integration

## Credentials required

| Field | Description |
| - | - |
| **API Token** | An Arnica API token. Generate one in **Arnica Settings → Integrations → API**. |
| **Organization ID** | Your Arnica organization identifier, found in **Settings → Organization**. |

## Setup

**1. Generate an Arnica API token**

1. Log in to your Arnica account.
2. Go to **Settings → Integrations → API Access**.
3. Click **Generate Token**.
4. Give the token a descriptive name (e.g., `tierity`).
5. Assign **Read** permissions.
6. Copy the token.

**2. Find your organization ID**

Your Arnica organization ID is displayed in the URL or in **Settings → Organization Details**.

**3. Configure the integration in Tierity**

1. Go to **Config → Integrations → Arnica**.
2. Click **Configure**.
3. Enter your **API Token** and **Organization ID**.
4. Click **Save & Test**.

## What gets synced

| Data | Description |
| - | - |
| **Hardcoded secrets** | API keys, tokens, and passwords committed to source code |
| **Risky code changes** | Code changes that touch sensitive areas (auth, cryptography, access control) |
| **Supply chain risks** | Malicious or highly vulnerable packages in your dependency graph |
| **Developer risk signals** | Unusual committer behavior, token misuse, and policy violations |
| **Severity** | Critical, high, medium, low |
| **Repository** | The repository and branch where the issue was found |
| **Remediation** | Suggested actions and fix guidance |

## Viewing findings in Tierity

Arnica findings appear under **Security Findings → Arnica** in your organization. You can filter by severity, finding type, and repository. Findings can be tracked through remediation and assigned to tasks.

## Disconnecting

To remove the Arnica integration:

1. Go to **Config → Integrations → Arnica**.
2. Click **Disconnect**.
3. Confirm.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.