> For the complete documentation index, see [llms.txt](https://docs.arnica.io/arnica-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.arnica.io/arnica-documentation/code-risks.md).

# Code Risks

- [Static Application Security Testing (SAST)](https://docs.arnica.io/arnica-documentation/code-risks/static-application-security-testing-sast.md)
- [Custom SAST Rules](https://docs.arnica.io/arnica-documentation/code-risks/static-application-security-testing-sast/custom-sast-rules.md)
- [Developer Feedback Loop](https://docs.arnica.io/arnica-documentation/code-risks/static-application-security-testing-sast/developer-feedback-loop.md): Generate AI SAST additional-prompt rules from dismissed findings to reduce false positives in future scans.
- [Software Composition Analysis (SCA)](https://docs.arnica.io/arnica-documentation/code-risks/software-composition-analysis-sca.md)
- [3rd Party Package Licenses](https://docs.arnica.io/arnica-documentation/code-risks/3rd-party-package-licenses.md)
- [3rd Party Package Reputation](https://docs.arnica.io/arnica-documentation/code-risks/3rd-party-package-reputation.md)
- [How to Find Alternative Packages](https://docs.arnica.io/arnica-documentation/code-risks/3rd-party-package-reputation/how-to-find-alternative-packages.md): This page discusses how developers can find alternative packages to low-reputation open source packages
- [Infrastructure as Code Security (IaC)](https://docs.arnica.io/arnica-documentation/code-risks/infrastructure-as-code-security-iac.md)
- [Code Risk Policy Settings](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-policy-settings.md)
- [Developer Feedback On Push](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-policy-settings/developer-feedback-on-push.md)
- [Dismissal Settings and Snooze](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-policy-settings/dismissal-settings.md): Centralized dismissal controls and the Snooze workflow for temporarily deferring findings.
- [Require Review Before Dismissal](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-policy-settings/require-review-before-dismissal.md)
- [0 New High Severity Vulnerabilities](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-policy-settings/0-new-high-severity-vulnerabilities.md)
- [Enforce Remediation SLA](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-policy-settings/enforce-remediation-sla.md)
- [SLA Branches](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-policy-settings/sla-branches.md): Understand how SLA branches define where Arnica starts remediation timers and scopes routine code risk scans.
- [Post-Build Scan](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-policy-settings/post-build-scan.md)
- [Code Risk Magic Links](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-magic-links.md)
- [Code Risk Language and Framework Support](https://docs.arnica.io/arnica-documentation/code-risks/code-risk-language-and-framework-support.md): This page will be deprecated when all other pages in code risk are completed