github · unprovable · Oct 1, 2025 · Oct 1, 2025
@@ -3,7 +3,7 @@
  * @description Finds all potential usage of asymmeric keys (RSA & ECC) using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/all-asymmetric-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of cryptographic algorithms usage using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/all-cryptographic-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of asymmeric keys for encryption or key exchange using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/all-asymmetric-encryption-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of padding schemes used with asymmeric algorithms.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/asymmetric-padding-schemes
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of authenticated encryption schemes using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/authenticated-encryption-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential block cipher modes of operations using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/block-cipher-mode
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential sources for initialization vectors (IV) or nonce used in block ciphers while using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/iv-sources
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potentially unknown sources for initialization vectors (IV) or nonce used in block ciphers while using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/unkown-iv-sources
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential key lengths for elliptic curve algorithms usage.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/elliptic-curve-key-length
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of elliptic curve algorithms using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/elliptic-curve-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of cryptographic hash algorithms using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/hash-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of key exchange using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/key-exchange
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all known potential sources for asymmetric key generation while using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/asymmetric-key-generation
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of signing algorithms using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/signing-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of symmetric encryption algorithms using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/symmetric-encryption-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of padding schemes used with symmeric algorithms.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/symmetric-padding-schemes
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all unknown potential sources for asymmetric key generation while using the supported libraries.
  * @kind problem
  * @id cpp/quantum-readiness/cbom/unkwon-asymmetric-key-generation
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of asymmeric keys (RSA & ECC) using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/all-asymmetric-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of cryptographic algorithms usage using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/all-cryptographic-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of asymmeric keys for encryption or key exchange using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/all-asymmetric-encryption-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all known potential sources for asymmetric key generation while using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/asymmetric-key-generation
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of padding schemes used with asymmeric algorithms.
  * @kind problem
  * @id py/quantum-readiness/cbom/asymmetric-padding-schemes
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of authenticated encryption schemes using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/authenticated-encryption-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential block cipher modes of operations using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/block-cipher-mode
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential sources for initialization vectors (IV) or nonce used in block ciphers while using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/iv-sources
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potentially unknown sources for initialization vectors (IV) or nonce used in block ciphers while using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/unkown-iv-sources
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of elliptic curve algorithms using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/elliptic-curve-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of cryptographic hash algorithms using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/hash-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of key derivation using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/key-derivation
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of key exchange using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/key-exchange
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of signing algorithms using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/signing-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of symmetric encryption algorithms using the supported libraries.
  * @kind problem
  * @id py/quantum-readiness/cbom/symmetric-encryption-algorithms
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */

@@ -3,7 +3,7 @@
  * @description Finds all potential usage of padding schemes used with symmeric algorithms.
  * @kind problem
  * @id py/quantum-readiness/cbom/symmetric-padding-schemes
- * @problem.severity error
+ * @severity recommendation
  * @tags cbom
  *       cryptography
  */