rules:
  - id: go-weak-ecc-curve
    pattern-either:
      - pattern: elliptic.P256()
      - pattern: elliptic.P384()
      - pattern: elliptic.P521()
      - pattern: ecdsa.GenerateKey(elliptic.P256(), ...)
      - pattern: ecdsa.GenerateKey(elliptic.P384(), ...)
      - pattern: ecdsa.GenerateKey(elliptic.P521(), ...)
    message: Quantum-vulnerable ECC curve detected
    severity: WARNING
    languages:
      - go
    metadata:
      category: security
      quantum_vulnerable: true
      quantum_risk_score: 85
