Cryptographic Compliance
Generate a Cryptographic Bill of Materials (CBOM) from container filesystems. Inventories algorithms, certificates, keys, and protocols for compliance audits and post-quantum migration planning.
Schedule with the Agent
# Weekly cryptographic inventory
reel.io/schedule: |
0 3 * * 0 | upload cbom
reel.io/s3-bucket: "compliance-evidence"
One-Shot with the CLI
Run a crypto inventory straight from your terminal, no cluster needed.
# Scan an image
reel export cbom --image nginx:latest
# Scan a running container
sudo reel export cbom --container my-nginx
What Gets Detected
| Category | Details |
|---|---|
| Algorithms | Encryption, hashing, and signature algorithms in use |
| Certificates | X.509 certificates with expiration and algorithm analysis |
| Protocols | TLS/SSH versions, broken down by cipher suite |
| Key Materials | Private keys, public keys, and key files on disk |
Output: CycloneDX JSON with cryptographic extensions.
Schedule Examples
# Full filesystem scan, weekly (comprehensive, slower)
0 3 * * 0 | upload cbom
# Common paths only, daily (faster, covers /etc/ssl, /etc/pki)
0 3 * * * | upload cbom --common-paths-only
# Include system CA trust store
0 3 * * 0 | upload cbom --include-system-cas