skills

Reference for the Arnica security API: endpoints, auth, query params, error model, pagination, and the writable status enum. Use when calling Arnica endpoints directly, querying findings, managing products/assets/owners, scanning SBOMs, reviewing inventory, or integrating with the Arnica platform.

Triage code security findings from Arnica (SAST, SCA, IaC, CI/CD security, etc. — everything except secrets) by correlating them to source code, classifying as true or false positive, fixing true positives, and dismissing false positives via API. Use when the user asks to review, triage, fix, or dismiss security findings, code risks, or Arnica findings.