gitlab-org/gitlab-runner

Escaneado el 22 may 2026

Puntuación de riesgo/ 100

Riesgo moderado

Resumen

GitLab Runner exhibits moderate post-quantum cryptography risks with 10 quantum-vulnerable findings across 5 files. The primary concerns involve RSA private key usage in GCS adapter tests and potential misidentification of AES256 symmetric encryption as ECDSA asymmetric patterns. While AES-256 remains quantum-resistant for symmetric encryption, RSA key management requires migration planning.

Crítico

Alto

Medio

Bajo

Hallazgos principales

AltoPKCS#1 (RSA-based)
cache/gcsv2/adapter_test.go:17
Evidencia
```
privateKey = `-----BEGIN RSA PRIVATE KEY-----
```
AltoECDSA
cache/s3/adapter_test.go:202
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)
Evidencia
```
headers.Add("X-Amz-Server-Side-Encryption", "AES256")
```
AltoECDSA
cache/cacheconfig/cacheconfig_test.go:242
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)
Evidencia
```
expectedEncryptionType: cacheconfig.S3EncryptionTypeAes256,
```
AltoECDSA
cache/cacheconfig/cacheconfig.go:94
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)
Evidencia
```
return S3EncryptionTypeAes256
```
AltoECDSA
cache/cacheconfig/cacheconfig_test.go:248
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)
Evidencia
```
"AES256 encryption": {
```

+ 5 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis