what is pqc-scan fr?

pqc-scan is a command-line tool that scans your code, config files, and dependencies for cryptography that would be broken by a future quantum computer, before it becomes a real problem. It parses your actual source code using a proper code-structure parser rather than fragile text patterns, so it can point to the exact line that is vulnerable, explain why, and suggest a specific replacement algorithm that has been standardized by the US National Institute of Standards and Technology, known as NIST. The README explains the underlying risk in plain terms: most of the public-key cryptography that secures the internet today, including RSA and elliptic-curve algorithms, would be broken by a quantum algorithm called Shor's algorithm if a powerful enough quantum computer existed. Symmetric encryption like AES and hashing like SHA-256 are only weakened, not broken, and remain considered safe. The README also warns about a tactic called harvest now, decrypt later, where someone captures encrypted data today with the plan to decrypt it once quantum computers are capable enough, which puts any long-lived sensitive data at risk right now, not just in the future. The tool is installed from source using pip and requires Python 3.10 or later. All the parsing libraries it depends on install automatically, with no separate compiler or toolchain needed. It runs as a command called pqc-scan with four subcommands: scan, which checks a folder or file and prints a report to the console or to formats like SARIF or JSON, report, which writes a machine-readable file such as a Cryptography Bill of Materials, init, which creates a starter configuration file, and rules, which lists every detection rule the tool knows about. Common options let a user filter results by severity, scan only files changed in the current git diff for faster pull request checks, exclude certain folders, and fail with a nonzero exit code when problems are found, which makes it usable as an automated check in a GitHub Actions pipeline.