{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "components": [
    {
      "bom-ref": "iac:infrastructure/k8s-tls-secret.yaml:4:x509",
      "cryptoProperties": {
        "algorithmProperties": {
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "X.509 certificate material",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/k8s-tls-secret.yaml:4",
      "evidence": {
        "occurrences": [
          {
            "line": 4,
            "location": "infrastructure/k8s-tls-secret.yaml"
          }
        ]
      },
      "name": "X.509 certificate material",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/k8s-tls-secret.yaml"
        },
        {
          "name": "latticis:line",
          "value": "4"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:infrastructure/k8s-tls-secret.yaml:7:x509",
      "cryptoProperties": {
        "algorithmProperties": {
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "X.509 certificate material",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/k8s-tls-secret.yaml:7",
      "evidence": {
        "occurrences": [
          {
            "line": 7,
            "location": "infrastructure/k8s-tls-secret.yaml"
          }
        ]
      },
      "name": "X.509 certificate material",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/k8s-tls-secret.yaml"
        },
        {
          "name": "latticis:line",
          "value": "7"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:infrastructure/k8s-tls-secret.yaml:9:x509",
      "cryptoProperties": {
        "algorithmProperties": {
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "X.509 certificate material",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/k8s-tls-secret.yaml:9",
      "evidence": {
        "occurrences": [
          {
            "line": 9,
            "location": "infrastructure/k8s-tls-secret.yaml"
          }
        ]
      },
      "name": "X.509 certificate material",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/k8s-tls-secret.yaml"
        },
        {
          "name": "latticis:line",
          "value": "9"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:infrastructure/k8s-tls-secret.yaml:10:x509",
      "cryptoProperties": {
        "algorithmProperties": {
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "X.509 certificate material",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/k8s-tls-secret.yaml:10",
      "evidence": {
        "occurrences": [
          {
            "line": 10,
            "location": "infrastructure/k8s-tls-secret.yaml"
          }
        ]
      },
      "name": "X.509 certificate material",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/k8s-tls-secret.yaml"
        },
        {
          "name": "latticis:line",
          "value": "10"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:infrastructure/main.tf:3:RSA",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 112,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "RSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/main.tf:3",
      "evidence": {
        "occurrences": [
          {
            "line": 3,
            "location": "infrastructure/main.tf"
          }
        ]
      },
      "name": "RSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/main.tf"
        },
        {
          "name": "latticis:line",
          "value": "3"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.768"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:infrastructure/main.tf:8:ECDSA",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 128,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "ECDSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/main.tf:8",
      "evidence": {
        "occurrences": [
          {
            "line": 8,
            "location": "infrastructure/main.tf"
          }
        ]
      },
      "name": "ECDSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/main.tf"
        },
        {
          "name": "latticis:line",
          "value": "8"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.768"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:infrastructure/main.tf:9:ECDSA",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 128,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "ECDSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/main.tf:9",
      "evidence": {
        "occurrences": [
          {
            "line": 9,
            "location": "infrastructure/main.tf"
          }
        ]
      },
      "name": "ECDSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/main.tf"
        },
        {
          "name": "latticis:line",
          "value": "9"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.768"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:infrastructure/main.tf:2:rsa",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 112,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "RSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/main.tf:2",
      "evidence": {
        "occurrences": [
          {
            "line": 2,
            "location": "infrastructure/main.tf"
          }
        ]
      },
      "name": "RSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/main.tf"
        },
        {
          "name": "latticis:line",
          "value": "2"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:infrastructure/main.tf:7:rsa",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 112,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "RSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/main.tf:7",
      "evidence": {
        "occurrences": [
          {
            "line": 7,
            "location": "infrastructure/main.tf"
          }
        ]
      },
      "name": "RSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/main.tf"
        },
        {
          "name": "latticis:line",
          "value": "7"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:infrastructure/main.tf:12:aes",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 128,
          "parameterSetIdentifier": "AES",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/main.tf:12",
      "evidence": {
        "occurrences": [
          {
            "line": 12,
            "location": "infrastructure/main.tf"
          }
        ]
      },
      "name": "AES",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "needs_review"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/main.tf"
        },
        {
          "name": "latticis:line",
          "value": "12"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.33599999999999997"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:infrastructure/main.tf:3:rsa",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 112,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "RSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/main.tf:3",
      "evidence": {
        "occurrences": [
          {
            "line": 3,
            "location": "infrastructure/main.tf"
          }
        ]
      },
      "name": "RSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/main.tf"
        },
        {
          "name": "latticis:line",
          "value": "3"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:infrastructure/main.tf:8:ecdsa",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 128,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "ECDSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/main.tf:8",
      "evidence": {
        "occurrences": [
          {
            "line": 8,
            "location": "infrastructure/main.tf"
          }
        ]
      },
      "name": "ECDSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/main.tf"
        },
        {
          "name": "latticis:line",
          "value": "8"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:infrastructure/pqc-pilot.yaml:5:DSA",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 112,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "DSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/pqc-pilot.yaml:5",
      "evidence": {
        "occurrences": [
          {
            "line": 5,
            "location": "infrastructure/pqc-pilot.yaml"
          }
        ]
      },
      "name": "DSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/pqc-pilot.yaml"
        },
        {
          "name": "latticis:line",
          "value": "5"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.768"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:infrastructure/pqc-pilot.yaml:4:ML-KEM",
      "cryptoProperties": {
        "algorithmProperties": {
          "nistQuantumSecurityLevel": 1,
          "parameterSetIdentifier": "ML-KEM",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/pqc-pilot.yaml:4",
      "evidence": {
        "occurrences": [
          {
            "line": 4,
            "location": "infrastructure/pqc-pilot.yaml"
          }
        ]
      },
      "name": "ML-KEM",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_safe"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/pqc-pilot.yaml"
        },
        {
          "name": "latticis:line",
          "value": "4"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.096"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:infrastructure/pqc-pilot.yaml:5:ML-DSA",
      "cryptoProperties": {
        "algorithmProperties": {
          "nistQuantumSecurityLevel": 1,
          "parameterSetIdentifier": "ML-DSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in infrastructure/pqc-pilot.yaml:5",
      "evidence": {
        "occurrences": [
          {
            "line": 5,
            "location": "infrastructure/pqc-pilot.yaml"
          }
        ]
      },
      "name": "ML-DSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_safe"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "infrastructure/pqc-pilot.yaml"
        },
        {
          "name": "latticis:line",
          "value": "5"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.096"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:services/claims-service/callback_signer.py:13:SHA-256",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 128,
          "parameterSetIdentifier": "SHA-256",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/claims-service/callback_signer.py:13",
      "evidence": {
        "occurrences": [
          {
            "line": 13,
            "location": "services/claims-service/callback_signer.py"
          }
        ]
      },
      "name": "SHA-256",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "needs_review"
        },
        {
          "name": "latticis:kind",
          "value": "code_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/claims-service/callback_signer.py"
        },
        {
          "name": "latticis:line",
          "value": "13"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.32000000000000006"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "py:services/claims-service/callback_signer.py:9:RSA",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 112,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "RSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/claims-service/callback_signer.py:9",
      "evidence": {
        "occurrences": [
          {
            "line": 9,
            "location": "services/claims-service/callback_signer.py"
          }
        ]
      },
      "name": "RSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "code_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/claims-service/callback_signer.py"
        },
        {
          "name": "latticis:line",
          "value": "9"
        },
        {
          "name": "latticis:confidence",
          "value": "0.85"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.68"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "py:services/claims-service/callback_signer.py:17:MD5",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 0,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "MD5",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/claims-service/callback_signer.py:17",
      "evidence": {
        "occurrences": [
          {
            "line": 17,
            "location": "services/claims-service/callback_signer.py"
          }
        ]
      },
      "name": "MD5",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "code_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/claims-service/callback_signer.py"
        },
        {
          "name": "latticis:line",
          "value": "17"
        },
        {
          "name": "latticis:confidence",
          "value": "0.85"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.68"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:services/mobile-backend/push-signing.yaml:5:ECDSA",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 128,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "ECDSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/mobile-backend/push-signing.yaml:5",
      "evidence": {
        "occurrences": [
          {
            "line": 5,
            "location": "services/mobile-backend/push-signing.yaml"
          }
        ]
      },
      "name": "ECDSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/mobile-backend/push-signing.yaml"
        },
        {
          "name": "latticis:line",
          "value": "5"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.768"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:services/partner-gateway/gateway.conf:5:tls_legacy",
      "cryptoProperties": {
        "algorithmProperties": {
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "Legacy TLS/SSL configuration",
          "primitive": "unknown"
        },
        "assetType": "protocol"
      },
      "description": "Found in services/partner-gateway/gateway.conf:5",
      "evidence": {
        "occurrences": [
          {
            "line": 5,
            "location": "services/partner-gateway/gateway.conf"
          }
        ]
      },
      "name": "Legacy TLS/SSL configuration",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "tls_config"
        },
        {
          "name": "latticis:file",
          "value": "services/partner-gateway/gateway.conf"
        },
        {
          "name": "latticis:line",
          "value": "5"
        },
        {
          "name": "latticis:confidence",
          "value": "0.7"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.6719999999999999"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:services/payment-integration/payment-config.yaml:5:SHA-256",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 128,
          "parameterSetIdentifier": "SHA-256",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/payment-integration/payment-config.yaml:5",
      "evidence": {
        "occurrences": [
          {
            "line": 5,
            "location": "services/payment-integration/payment-config.yaml"
          }
        ]
      },
      "name": "SHA-256",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "needs_review"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/payment-integration/payment-config.yaml"
        },
        {
          "name": "latticis:line",
          "value": "5"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.384"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:services/payment-integration/payment-config.yaml:5:HMAC",
      "cryptoProperties": {
        "algorithmProperties": {
          "parameterSetIdentifier": "HMAC",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/payment-integration/payment-config.yaml:5",
      "evidence": {
        "occurrences": [
          {
            "line": 5,
            "location": "services/payment-integration/payment-config.yaml"
          }
        ]
      },
      "name": "HMAC",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "needs_review"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/payment-integration/payment-config.yaml"
        },
        {
          "name": "latticis:line",
          "value": "5"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.384"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "iac:services/payment-integration/payment-config.yaml:7:secret_env",
      "cryptoProperties": {
        "algorithmProperties": {
          "parameterSetIdentifier": "Embedded secret / API-key reference",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/payment-integration/payment-config.yaml:7",
      "evidence": {
        "occurrences": [
          {
            "line": 7,
            "location": "services/payment-integration/payment-config.yaml"
          }
        ]
      },
      "name": "Embedded secret / API-key reference",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "needs_review"
        },
        {
          "name": "latticis:kind",
          "value": "config_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/payment-integration/payment-config.yaml"
        },
        {
          "name": "latticis:line",
          "value": "7"
        },
        {
          "name": "latticis:confidence",
          "value": "0.56"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.26880000000000004"
        },
        {
          "name": "latticis:review_reason",
          "value": "placeholder key material marker: redacted"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "alg:services/policy-api/token-service.ts:12:AES-256",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 256,
          "parameterSetIdentifier": "AES-256",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/policy-api/token-service.ts:12",
      "evidence": {
        "occurrences": [
          {
            "line": 12,
            "location": "services/policy-api/token-service.ts"
          }
        ]
      },
      "name": "AES-256",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "needs_review"
        },
        {
          "name": "latticis:kind",
          "value": "code_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/policy-api/token-service.ts"
        },
        {
          "name": "latticis:line",
          "value": "12"
        },
        {
          "name": "latticis:confidence",
          "value": "0.8"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.52"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "node:services/policy-api/token-service.ts:12:AES",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 128,
          "parameterSetIdentifier": "AES",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/policy-api/token-service.ts:12",
      "evidence": {
        "occurrences": [
          {
            "line": 12,
            "location": "services/policy-api/token-service.ts"
          }
        ]
      },
      "name": "AES",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "needs_review"
        },
        {
          "name": "latticis:kind",
          "value": "code_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/policy-api/token-service.ts"
        },
        {
          "name": "latticis:line",
          "value": "12"
        },
        {
          "name": "latticis:confidence",
          "value": "0.85"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.54"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "node:services/policy-api/token-service.ts:7:RSA",
      "cryptoProperties": {
        "algorithmProperties": {
          "classicalSecurityLevel": 112,
          "nistQuantumSecurityLevel": 0,
          "parameterSetIdentifier": "RSA",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/policy-api/token-service.ts:7",
      "evidence": {
        "occurrences": [
          {
            "line": 7,
            "location": "services/policy-api/token-service.ts"
          }
        ]
      },
      "name": "RSA",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "quantum_vulnerable"
        },
        {
          "name": "latticis:kind",
          "value": "code_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/policy-api/token-service.ts"
        },
        {
          "name": "latticis:line",
          "value": "7"
        },
        {
          "name": "latticis:confidence",
          "value": "0.85"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.8800000000000001"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    },
    {
      "bom-ref": "node:services/policy-api/token-service.ts:8:HMAC",
      "cryptoProperties": {
        "algorithmProperties": {
          "parameterSetIdentifier": "HMAC",
          "primitive": "unknown"
        },
        "assetType": "algorithm"
      },
      "description": "Found in services/policy-api/token-service.ts:8",
      "evidence": {
        "occurrences": [
          {
            "line": 8,
            "location": "services/policy-api/token-service.ts"
          }
        ]
      },
      "name": "HMAC",
      "properties": [
        {
          "name": "latticis:classification",
          "value": "needs_review"
        },
        {
          "name": "latticis:kind",
          "value": "code_ref"
        },
        {
          "name": "latticis:file",
          "value": "services/policy-api/token-service.ts"
        },
        {
          "name": "latticis:line",
          "value": "8"
        },
        {
          "name": "latticis:confidence",
          "value": "0.85"
        },
        {
          "name": "latticis:snippet",
          "value": "[redacted]"
        },
        {
          "name": "latticis:risk_score",
          "value": "0.54"
        }
      ],
      "type": "cryptographic-asset",
      "version": ""
    }
  ],
  "metadata": {
    "component": {
      "name": "assessment-target",
      "type": "application"
    },
    "properties": [
      {
        "name": "latticis:total_files_scanned",
        "value": "11"
      },
      {
        "name": "latticis:total_assets",
        "value": "27"
      },
      {
        "name": "latticis:scanner_version",
        "value": "0.1.4"
      },
      {
        "name": "latticis:git_commit",
        "value": "2e10094e3b14"
      },
      {
        "name": "latticis:quantum_vulnerable_share",
        "value": "0.6296"
      }
    ],
    "timestamp": "2026-08-03T00:28:55.918361+00:00",
    "tools": [
      {
        "name": "MigrationOS",
        "vendor": "Latticis Technologies",
        "version": "0.1.4"
      }
    ]
  },
  "serialNumber": "urn:uuid:785b0967-f448-4df6-b3ea-94cf3d5aaee4",
  "specVersion": "1.6",
  "version": 1,
  "vulnerabilities": [
    {
      "affects": [
        {
          "ref": "iac:infrastructure/k8s-tls-secret.yaml:4:x509"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:infrastructure/k8s-tls-secret.yaml:4:x509",
      "description": "Static reference to X.509 certificate material classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "iac:infrastructure/k8s-tls-secret.yaml:7:x509"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:infrastructure/k8s-tls-secret.yaml:7:x509",
      "description": "Static reference to X.509 certificate material classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "iac:infrastructure/k8s-tls-secret.yaml:9:x509"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:infrastructure/k8s-tls-secret.yaml:9:x509",
      "description": "Static reference to X.509 certificate material classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "iac:infrastructure/k8s-tls-secret.yaml:10:x509"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:infrastructure/k8s-tls-secret.yaml:10:x509",
      "description": "Static reference to X.509 certificate material classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "alg:infrastructure/main.tf:3:RSA"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-alg:infrastructure/main.tf:3:RSA",
      "description": "Static reference to RSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "alg:infrastructure/main.tf:8:ECDSA"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-alg:infrastructure/main.tf:8:ECDSA",
      "description": "Static reference to ECDSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "alg:infrastructure/main.tf:9:ECDSA"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-alg:infrastructure/main.tf:9:ECDSA",
      "description": "Static reference to ECDSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "iac:infrastructure/main.tf:2:rsa"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:infrastructure/main.tf:2:rsa",
      "description": "Static reference to RSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "iac:infrastructure/main.tf:7:rsa"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:infrastructure/main.tf:7:rsa",
      "description": "Static reference to RSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "iac:infrastructure/main.tf:3:rsa"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:infrastructure/main.tf:3:rsa",
      "description": "Static reference to RSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "iac:infrastructure/main.tf:8:ecdsa"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:infrastructure/main.tf:8:ecdsa",
      "description": "Static reference to ECDSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "alg:infrastructure/pqc-pilot.yaml:5:DSA"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-alg:infrastructure/pqc-pilot.yaml:5:DSA",
      "description": "Static reference to DSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "py:services/claims-service/callback_signer.py:9:RSA"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-py:services/claims-service/callback_signer.py:9:RSA",
      "description": "Static reference to RSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "py:services/claims-service/callback_signer.py:17:MD5"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-py:services/claims-service/callback_signer.py:17:MD5",
      "description": "Static reference to MD5 classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "alg:services/mobile-backend/push-signing.yaml:5:ECDSA"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-alg:services/mobile-backend/push-signing.yaml:5:ECDSA",
      "description": "Static reference to ECDSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "iac:services/partner-gateway/gateway.conf:5:tls_legacy"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-iac:services/partner-gateway/gateway.conf:5:tls_legacy",
      "description": "Static reference to Legacy TLS/SSL configuration classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    },
    {
      "affects": [
        {
          "ref": "node:services/policy-api/token-service.ts:7:RSA"
        }
      ],
      "analysis": {
        "detail": "Validate the operational context before planning migration to a post-quantum algorithm",
        "state": "in_triage"
      },
      "bom-ref": "vuln-node:services/policy-api/token-service.ts:7:RSA",
      "description": "Static reference to RSA classified as quantum-vulnerable",
      "id": "urn:latticis:policy:quantum-vulnerable",
      "source": {
        "name": "LATTICIS extension namespace"
      }
    }
  ]
}