SCANOSS detailed new capabilities within Earnie, its code governance solution, to address a critical blind spot for organizations preparing for quantum computing. Most enterprises, according to SCANOSS Chief Product Officer Matias D’Aloia, “can’t see much of it,” referring to the cryptographic algorithms embedded within their codebases.

Earnie creates a structured Cryptography Bill of Materials (CBOM), mirroring the widely adopted Software Bill of Materials, and flags algorithms like RSA and ECDH as quantum-vulnerable, assigning a severity rating to prioritize remediation efforts. This continuous inventory, SCANOSS reports, traces cryptographic reachability and provides a standing record of an organization’s cryptographic…