miles0sage/PQC Posture Scanner
Scan your codebase for quantum-vulnerable cryptography. Detects RSA, ECDSA, DH, weak hashes, and generates a Crypto Bill of Materials (CBOM).
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Mar 26, 2026
- License
- None
Pinned Snippet
uses: miles0sage/quantum-mcp@20318554f73abcfbcb46bb0ac0e88e6200708f45 # v0.1.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (relative to repo root) | no | . |
| fail-on | Fail the action if risk level meets or exceeds this threshold (CRITICAL, HIGH, MEDIUM, LOW, NONE) | no | CRITICAL |
| format | Output format: text, json, sarif | no | text |
| context-filter | Filter findings by context: all, prod, test | no | all |
Outputs
| name | description |
|---|---|
| risk-score | Quantum risk score (0-100) |
| risk-level | Risk level: CRITICAL, HIGH, MEDIUM, or LOW |
| findings-count | Total number of crypto findings |
| production-findings | Number of production (non-test) findings |