Arnica

Iru connects to Arnica to catch hardcoded secrets and risky developer behavior directly, without needing a CI/CD pipeline already in place. It reads secret-detection findings and developer risk reports directly.

Key Capabilities

• Confirm no hardcoded secrets sit in repositories
• Verify developer access follows least privilege
• Check that security policies are enforced and risky behavior is addressed

Evidence Collected

• Secret detection findings
• Developer behavior risk reports
• Policy compliance status

Learn more