{
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "apk-scanner.com",
          "informationUri": "https://apk-scanner.com",
          "version": "1.0.0",
          "rules": [
            {
              "id": "APKSCAN-1-s3_bucket",
              "name": "S3Bucket",
              "shortDescription": {
                "text": "Amazon S3 bucket reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/s3_bucket",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-20-google_api_key",
              "name": "GoogleApiKey",
              "shortDescription": {
                "text": "Google API key (client-shipped; restriction unverified)"
              },
              "fullDescription": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "helpUri": "https://apk-scanner.com/finding/google_api_key",
              "help": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-798",
                  "MASVS-STORAGE-1"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-798"
                ],
                "masvs": [
                  "MASVS-STORAGE-1"
                ]
              }
            },
            {
              "id": "APKSCAN-53-firebase_storage",
              "name": "FirebaseStorage",
              "shortDescription": {
                "text": "Firebase Storage bucket reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/firebase_storage",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-57-short_key",
              "name": "ShortKey",
              "shortDescription": {
                "text": "Short signing key"
              },
              "fullDescription": {
                "text": "Use an RSA key of at least 2048 bits or an EC P-256 key for signing."
              },
              "helpUri": "https://apk-scanner.com/finding/short_key",
              "help": {
                "text": "Use an RSA key of at least 2048 bits or an EC P-256 key for signing."
              },
              "defaultConfiguration": {
                "level": "warning"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-326",
                  "MASVS-CRYPTO-1"
                ],
                "security-severity": "5.0",
                "cwe": [
                  "CWE-326"
                ],
                "masvs": [
                  "MASVS-CRYPTO-1"
                ]
              }
            }
          ]
        }
      },
      "automationDetails": {
        "id": "apk-scanner/com.gameloft.anmp.disney.speedstorm/49a971d0-229e-40d8-9729-fb47bfc43942"
      },
      "invocations": [
        {
          "executionSuccessful": false
        }
      ],
      "results": [
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/didomi_iab_config_v3.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e6e8931de1ec530e9fd8d3056a3b315290f866d0a9e7c2bd62392e82f2e546f5"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/didomi_iab_config_v3.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0ee77fd7c22cf293ebf5d420954bc6dc10f7fd76a5beedc4fa53b5147c7bd2de"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "fa31c9b9df23a91ab4302f4a61ec52517102eb565c872b7a62cc1501dfe7d0d7"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-53-firebase_storage",
          "level": "note",
          "message": {
            "text": "Firebase Storage bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0c634dd8546ba3bf484799509848aee22368da1a71649a54ec2f873f1603c48a"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-57-short_key",
          "level": "warning",
          "message": {
            "text": "Short signing key (RSA 1024-bit)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "META-INF/signing:key"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "eff7d2f7607ae274d531546d1e828faf234bca919325efac0bbe80b2f250d041"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        }
      ],
      "properties": {
        "analysis": {
          "issues": [
            "split_extraction_failed"
          ],
          "stages": {
            "pii": "complete",
            "sbom": "complete",
            "signing": "certificate_parsed",
            "strings": "complete",
            "manifest": "complete"
          },
          "status": "partial",
          "grading": {
            "policy": "static-coverage-v1",
            "blockers": [
              "analysis_incomplete",
              "split_extraction_failed"
            ],
            "eligible": false
          },
          "timings_ms": {
            "total": 169818.3,
            "harvest": 130322.50499999984,
            "detectors": 30261.77899999998
          },
          "bytes_total": 2179399505,
          "bytes_scanned": 2179399505,
          "bytes_skipped": 0,
          "files_processed": 1298,
          "coverage_version": 2,
          "string_encodings": [
            "ascii",
            "utf16le"
          ],
          "signature_validation": "not_performed"
        },
        "provenance": {
          "mode": "static",
          "artifacts": [
            {
              "name": "base.apk",
              "sha256": "ceb96cc28d5b6c970446311ef21fec85528b777060848c9bf42b202be2304f9c"
            },
            {
              "name": "characters.apk",
              "sha256": "135d6986f5291e54d30593e7dffc17f75dbab4992cd16822be4789407630c6b8"
            },
            {
              "name": "common.apk",
              "sha256": "eeb2b61de2d0aae05296ed45df70bd4071b9d5823e3c0c5f226b034a63508d88"
            },
            {
              "name": "config.arm64_v8a.apk",
              "sha256": "146f4be23b5e785138e5be91add2a00326f3c60fae2730bbaa83716c1b516c9f"
            },
            {
              "name": "config.en.apk",
              "sha256": "876ee1d84eb300d15a96d4cbc04006356f0ea8cf428be160108257dd8723fa67"
            },
            {
              "name": "config.xxhdpi.apk",
              "sha256": "ed047e3da69c12cfc3bc15aacac0dcfc0c5e494442afb69653150fe8a0e71fbd"
            },
            {
              "name": "go.apk",
              "sha256": "e378750eb98fa2a61013acbad05b192e145f4d466ae91980563bfef089fe5357"
            },
            {
              "name": "initial.apk",
              "sha256": "be19507711409da57383d9fecbd74227b407b7cbeaddf3748d1107d67e80d8e0"
            },
            {
              "name": "karts.apk",
              "sha256": "e1b0b8a52e8ecbc99c73277286d85354a60cf28add8f36712665eb1e0366a2cf"
            },
            {
              "name": "main.apk",
              "sha256": "b6e0fc2439007e122eb48d83948bce97fa85f9d3a3f66f28ce504d85b9cb7627"
            },
            {
              "name": "pack0.apk",
              "sha256": "c4ca86de904e4782e02138d36c25d1f915eca9eaa069e14082e4ae7c0f8af916"
            },
            {
              "name": "pack_gn.apk",
              "sha256": "5eae23ebb637cc47f763afa8c087f94c99ce0bb5310ff98260516ffe2ee49d2b"
            },
            {
              "name": "pack_lv.apk",
              "sha256": "a3e873bb35dcb2c450218eb884cd321cf7e665b943251a9d2341dd037f2caa56"
            },
            {
              "name": "pack_sd.apk",
              "sha256": "5ccf78fd476257e29e9fbcce764d740bf6a3d1e08cdd8998d7ec623bd977de82"
            },
            {
              "name": "shaders.apk",
              "sha256": "21a67b55c96fc10f91914193697eb1e452941146302693c21ae3819128748165"
            },
            {
              "name": "textures_lowres.apk",
              "sha256": "6e5d16b9e32a155768da71cc69d1975a226fbbcea8de41e85b8bb2134452cbe3"
            },
            {
              "name": "trailer.apk",
              "sha256": "5d0f0f719b7601660dabd8aa8fa628651a9797f03e9c10e1fb96520fdfc43ed2"
            }
          ],
          "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
        },
        "apk_sha256": "ceb96cc28d5b6c970446311ef21fec85528b777060848c9bf42b202be2304f9c",
        "app_id": "com.gameloft.anmp.disney.speedstorm",
        "app_title": "Disney Speedstorm",
        "app_version": "1.21.0d",
        "scan_id": "49a971d0-229e-40d8-9729-fb47bfc43942",
        "scanned_at": "2026-10-09T12:28:43.115Z"
      }
    }
  ]
}