rules:
  - id: python-weak-ecc-curve
    pattern-either:
      - pattern: ec.SECP256R1()
      - pattern: ec.SECP384R1()
      - pattern: ec.SECP521R1()
      - pattern: ec.generate_private_key(ec.SECP256R1(), ...)
      - pattern: ec.generate_private_key(ec.SECP384R1(), ...)
      - pattern: ec.generate_private_key(ec.SECP521R1(), ...)
    message: Quantum-vulnerable ECC curve detected
    severity: WARNING
    languages:
      - python
    metadata:
      category: security
      quantum_vulnerable: true
      quantum_risk_score: 85
