Arnica

Arnica is an application-security platform built around a pipelineless model: instead of hooking into CI/CD, it integrates directly as a GitHub app to scan every code push in real time — secrets, SAST, SCA, IaC, licenses, container risks — with AI-assisted remediation suggestions and one-click fixes (e.g. purging a leaked secret from full git history). Its distinctive 2026 pitch is governing the AI code lifecycle: an Agentic Rules Enforcer injects the organization's security policy into AI coding sessions (Copilot, Cursor) so vulnerable code is steered at generation time rather than caught after the fact.

In April 2026 Arnica released DepsGuard, a free open-source Rust CLI (MIT) that hardens package-manager configs against supply-chain attacks after the March 2026 axios compromise, supporting npm, pnpm, yarn, bun, and uv with diff previews and one-command rollback. Honest caveats: the pipelineless approach means coverage depends on the SCM integration's event stream; AI-generated remediation suggestions still require human review; and vendor claims like 92% of risks caught pre-production are company-reported, not independently audited.

Install the Arnica GitHub app on your org; zero-config scanning starts on push. DepsGuard installs via cargo or binary.