Add cryptographic algorithm scanning and CycloneDX 1.7 CBOM output#1687

Draft

CortezFrazierJr wants to merge 18 commits into

masterfrom

feature/crypto-scanning

Commits on Apr 10, 2026

Add cryptographic algorithm scanning with CycloneDX 1.7 CBOM output

CortezFrazierJr
and
claude
committed
Address CodeRabbit review: fix algorithm normalization, CBOM context aggregation, parse error handling, and doc wording

CortezFrazierJr
and
claude
committed
Address remaining CodeRabbit review: remove guards, fix WalkDir pruning, add doc entries

CortezFrazierJr
and
claude
committed
Address nitpick reviews: deterministic CBOM output, O(n log n) dedupe, regression test, clock safety

CortezFrazierJr
and
claude
committed
Address CodeRabbit review round 3: fix AES key size guessing, ecosystem detection, variable shadowing

CortezFrazierJr
and
claude
committed
Address CodeRabbit review round 4: MSRV, dedup, BTreeSet, command builder, smoke tests

CortezFrazierJr
and
claude
committed
Address CodeRabbit review round 5: pin deps, DetectionMethod::as_str()

CortezFrazierJr
and
claude
committed
Address CodeRabbit review round 6: key-wrap primitive, ecosystem-scoped libs, algorithmFamily validation

CortezFrazierJr
and
claude
committed
Address CodeRabbit review round 7: deterministic BOM, canonical algorithmFamily

CortezFrazierJr
and
claude
committed
Fix formatting and linting after rebase onto master

CortezFrazierJr
and
claude
committed
Bump time crate to 0.3.47 to fix CVE-2026-25727

CortezFrazierJr
and
claude
committed
Address CodeRabbit review round 8: deterministic BOM output, SLH-DSA ordering, key-wrap sync, docs accuracy

CortezFrazierJr
and
claude
committed
Address CodeRabbit review round 9: filename-scoped manifests, import confidence, test fixtures

CortezFrazierJr
and
claude
committed
Remove phantom module entries from spectrometer.cabal

CortezFrazierJr
and
claude
committed
Add cmdEnvVars field to Command constructor in CryptoScan

CortezFrazierJr
and
claude
committed
Fix type error: pass Doc AnsiStyle directly to logInfo for FIPS report

CortezFrazierJr
and
claude
committed
Add crypto scan fields to test fixture AnalyzeConfig

CortezFrazierJr
and
claude
committed
Address CodeRabbit review round 10: parameterless FIPS, composite MAC warnings, fixture fixes

CortezFrazierJr
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add cryptographic algorithm scanning and CycloneDX 1.7 CBOM output#1687

Add cryptographic algorithm scanning and CycloneDX 1.7 CBOM output#1687
CortezFrazierJr wants to merge 18 commits into
masterfrom
feature/crypto-scanning

Commits on Apr 10, 2026

Add cryptographic algorithm scanning with CycloneDX 1.7 CBOM output

Address CodeRabbit review: fix algorithm normalization, CBOM context aggregation, parse error handling, and doc wording

Address remaining CodeRabbit review: remove guards, fix WalkDir pruning, add doc entries

Address nitpick reviews: deterministic CBOM output, O(n log n) dedupe, regression test, clock safety

Address CodeRabbit review round 3: fix AES key size guessing, ecosystem detection, variable shadowing

Address CodeRabbit review round 4: MSRV, dedup, BTreeSet, command builder, smoke tests

Address CodeRabbit review round 5: pin deps, DetectionMethod::as_str()

Address CodeRabbit review round 6: key-wrap primitive, ecosystem-scoped libs, algorithmFamily validation

Address CodeRabbit review round 7: deterministic BOM, canonical algorithmFamily

Fix formatting and linting after rebase onto master

Bump time crate to 0.3.47 to fix CVE-2026-25727

Address CodeRabbit review round 8: deterministic BOM output, SLH-DSA ordering, key-wrap sync, docs accuracy

Address CodeRabbit review round 9: filename-scoped manifests, import confidence, test fixtures

Remove phantom module entries from spectrometer.cabal

Add cmdEnvVars field to Command constructor in CryptoScan

Fix type error: pass Doc AnsiStyle directly to logInfo for FIPS report

Add crypto scan fields to test fixture AnalyzeConfig

Address CodeRabbit review round 10: parameterless FIPS, composite MAC warnings, fixture fixes