← Back to report

Investigate Short signing key (RSA 1024-bit)

Build 2.15.1 · Scan 2026-10-12T17:48:28.869Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

The signing key is shorter than the modern 2048-bit RSA minimum. Short keys are cryptographically weaker; a release should re-key to at least RSA-2048 (or an EC key).

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Signing metadata

Representative location

META-INF/signing:key

Recorded match

RSA-1024

Detector rule

signing

Recorded file locations

• META-INF/signing:key