Cryptographic Bill of Materials (CBOM) generator for .NET. Roslyn static analysis inventories crypto usage, classifies quantum risk on two axes, and scores PQC migration readiness. Outputs CycloneDX 1.6 + SARIF. Built for ordinary teams facing federal PQC timelines without an in-house cryptographer.
nist cryptography csharp roslyn dotnet static-analysis fips post-quantum-cryptography quantum-safe sarif devsecops dotnet-tool sbom pqc cyclonedx ml-kem ml-dsa slh-dsa cbom
-
Updated
Aug 26, 2026 - C#