{
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "apk-scanner.com",
          "informationUri": "https://apk-scanner.com",
          "version": "1.0.0",
          "rules": [
            {
              "id": "APKSCAN-37-allow_backup",
              "name": "AllowBackup",
              "shortDescription": {
                "text": "android:allowBackup=\"true\""
              },
              "fullDescription": {
                "text": "Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false."
              },
              "helpUri": "https://apk-scanner.com/finding/allow_backup",
              "help": {
                "text": "Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-530",
                  "CWE-312",
                  "MASVS-STORAGE-1",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-530",
                  "CWE-312"
                ],
                "masvs": [
                  "MASVS-STORAGE-1",
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-35-exported_provider",
              "name": "ExportedProvider",
              "shortDescription": {
                "text": "Exported ContentProvider without permission"
              },
              "fullDescription": {
                "text": "Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly."
              },
              "helpUri": "https://apk-scanner.com/finding/exported_provider",
              "help": {
                "text": "Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly."
              },
              "defaultConfiguration": {
                "level": "warning"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-926",
                  "CWE-284",
                  "MASVS-PLATFORM-1"
                ],
                "security-severity": "5.0",
                "cwe": [
                  "CWE-926",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-PLATFORM-1"
                ]
              }
            }
          ]
        }
      },
      "automationDetails": {
        "id": "apk-scanner/com.google.android.GoogleCamera/b798f6c0-1656-4572-9dd1-2aed89cbc320"
      },
      "invocations": [
        {
          "executionSuccessful": true
        }
      ],
      "results": [
        {
          "ruleId": "APKSCAN-37-allow_backup",
          "level": "note",
          "message": {
            "text": "Application data is backup-enabled"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8"
          },
          "properties": {
            "severity": "info",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "warning",
          "message": {
            "text": "Exported content provider without permission"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:amera.debug.contentprovider.DebugContentProvider"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a83ca51953e51a220bf9da2bc97ef4bbc096f8207f2a959e8d571d3571c7f7bc"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "warning",
          "message": {
            "text": "Exported content provider without permission"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:d.apps.camera.debug.shottracker.db.DbDebugDumper"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "443dd892a90db69533f9a856793d00dffd59c00ce7d5bb64a5ca33a7e86a7e44"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "warning",
          "message": {
            "text": "Exported content provider without permission"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:ndroid.apps.camera.debug.metrics.MetricsProvider"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e3becde398c0f04e38f113dbd34da892fc2b9bc5f4478b1ba7c14f94932871d8"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "warning",
          "message": {
            "text": "Exported content provider without permission"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:pps.camera.contentprovider.CameraContentProvider"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "8c62ca1537c6edb3c1a286d54c1003552840ccd992ff03751c75c5e57dd0e3b3"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        }
      ],
      "properties": {
        "analysis": {
          "issues": [],
          "stages": {
            "pii": "complete",
            "sbom": "complete",
            "signing": "certificate_parsed",
            "strings": "complete",
            "manifest": "complete"
          },
          "status": "complete",
          "grading": {
            "policy": "static-coverage-v1",
            "blockers": [],
            "eligible": true
          },
          "timings_ms": {
            "total": 65265.558,
            "harvest": 30776.84700000004,
            "detectors": 31979.306999999826
          },
          "bytes_total": 681125132,
          "bytes_scanned": 681125132,
          "bytes_skipped": 0,
          "files_processed": 2295,
          "coverage_version": 2,
          "string_encodings": [
            "ascii",
            "utf16le"
          ],
          "signature_validation": "not_performed"
        },
        "provenance": {
          "mode": "static",
          "artifacts": [
            {
              "name": "base.apk",
              "sha256": "6fb1a884fcec0ffa42b6b7ba5f242e9cc903f8b762d02a224d2fe30cb2f875f7"
            },
            {
              "name": "all_in_feature_module_tegu.apk",
              "sha256": "f16e110a79968c987c22fd23180ede162279a5c19837e876279b93f9136a0886"
            },
            {
              "name": "camera_vkp_asset_module.apk",
              "sha256": "f139ef62f8cf51edbb2f1db17f4c183d3e34b376046e7b1a3a6cfba1222ffc05"
            },
            {
              "name": "deeprestore_split_module_p24.apk",
              "sha256": "e1932ebe51ecdee2a8af0b023ccb4051c25c0d59a0d9a529ea947275e18ba268"
            },
            {
              "name": "hdrplus_asset_module_tegu.apk",
              "sha256": "1ae4d3d65b0af0e04caa6c932cbabc6e4754ccbe281ea206f52deecf1ac12c6a"
            },
            {
              "name": "hotshot_split_module.apk",
              "sha256": "bc032bfbd373b37cff649fa9378eb54bb14d3ed9ebe00d1f2cb2252964692fde"
            },
            {
              "name": "imax_split_module.apk",
              "sha256": "0977937904f5d636a3002104618d49cfce0527cab3591131b44defd317ee9554"
            },
            {
              "name": "l2l_assets_p24_module.apk",
              "sha256": "6615f195ae725320714b78495cf5c98da8dc1943a91bf45130975f3d2aa28e19"
            },
            {
              "name": "lightcycle_asset_module.apk",
              "sha256": "8bfe9ff5dd7df1b336c22c18eb2b145a66f16c11b4ef505d03bb14c922d2d292"
            },
            {
              "name": "motion_blur_asset_module_p24.apk",
              "sha256": "40f30bb43e5eea8143352d636f98e594dd87f533801a5ece299f19b28ecb45db"
            },
            {
              "name": "portrait_asset_module.apk",
              "sha256": "712feff6aad5688d98696769ce0f7b60cbddd6b06b5adcb684294e9366ea76a8"
            },
            {
              "name": "portrait_asset_module_tegu.apk",
              "sha256": "078e473d9c5a4ea85525a37881ca3f7db98697ba68e5fe51703256dac33bd3c4"
            },
            {
              "name": "roi_tracking_asset_module_p24.apk",
              "sha256": "f6c0c58a9d449d2b2b1b09d7f2830d18ab781180c1cf43812881e8f0d4b550ce"
            },
            {
              "name": "smartcapture_split_module.apk",
              "sha256": "cbedd0778504c14f881767898f3bc458dda8e1ef73394cbcfa4ce4a0597eaab2"
            },
            {
              "name": "smartzoom_split_module.apk",
              "sha256": "af977a38d6a67f31db037b41215881de0f1577f6e966719d4881b11fb961de1d"
            },
            {
              "name": "startup_jni_split_module.apk",
              "sha256": "ebec7f923999b1e6bdff118ea5b8f4c40a398aac11e1a0af88d6928925deb628"
            }
          ],
          "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
        },
        "apk_sha256": "6fb1a884fcec0ffa42b6b7ba5f242e9cc903f8b762d02a224d2fe30cb2f875f7",
        "app_id": "com.google.android.GoogleCamera",
        "app_title": "Pixel Camera",
        "app_version": "9.8.102.748116395.16",
        "scan_id": "b798f6c0-1656-4572-9dd1-2aed89cbc320",
        "scanned_at": "2026-10-09T05:07:17.205Z"
      }
    }
  ]
}