{
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "apk-scanner.com",
          "informationUri": "https://apk-scanner.com",
          "version": "1.0.0",
          "rules": [
            {
              "id": "APKSCAN-1-s3_bucket",
              "name": "S3Bucket",
              "shortDescription": {
                "text": "Amazon S3 bucket reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/s3_bucket",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-2-firebase_rtdb",
              "name": "FirebaseRtdb",
              "shortDescription": {
                "text": "Firebase Realtime Database reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/firebase_rtdb",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-6-private_key",
              "name": "PrivateKey",
              "shortDescription": {
                "text": "Private key material"
              },
              "fullDescription": {
                "text": "Never ship private-key material in a client. Revoke/rotate the compromised key and hold it server-side or in a hardware-backed store."
              },
              "helpUri": "https://apk-scanner.com/finding/private_key",
              "help": {
                "text": "Never ship private-key material in a client. Revoke/rotate the compromised key and hold it server-side or in a hardware-backed store."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-321",
                  "MASVS-CRYPTO-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-321"
                ],
                "masvs": [
                  "MASVS-CRYPTO-2"
                ]
              }
            },
            {
              "id": "APKSCAN-20-google_api_key",
              "name": "GoogleApiKey",
              "shortDescription": {
                "text": "Google API key (client-shipped; restriction unverified)"
              },
              "fullDescription": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "helpUri": "https://apk-scanner.com/finding/google_api_key",
              "help": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-798",
                  "MASVS-STORAGE-1"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-798"
                ],
                "masvs": [
                  "MASVS-STORAGE-1"
                ]
              }
            }
          ]
        }
      },
      "automationDetails": {
        "id": "apk-scanner/com.nnacres.app/66c2a6ce-208a-42fc-86b3-2c9ec303acba"
      },
      "invocations": [
        {
          "executionSuccessful": true
        }
      ],
      "results": [
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "b7bfdfc339ce250c93e3f9da6723726061264b9cf9d3721daecec73539bc02e6"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "6809d97597f8c7d59b0480447cb0d9641183a2f306641c703baae8eb7cc05f0f"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e6af749aec25a732fd1adf22afad6b71b53a5ee03e791f970827a0b21f8c928b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "1970bfeab33f4115fc5f3e305a9b4c27c045e7b5b71d1b4e7e4e72ca6b64edfb"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "5a7342200f926297145616f1f51314433db042d9c3a1c319c0e3ddd04e632f07"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "21c04e716d6999d224b3f3d3820ffe84d4692e0f6524b600a6a067c56ede7d6a"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes8.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "6d3265bf2f5e1221c48d93b1c227e7ca5f10732ade5bc66fdfaf8eac1681c80b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "c2e424657ba95b144d73c60c2763006cc96d28bceb7cc6c0c42a24b35a06698d"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d2896010e2e9460e30328b3d67079b7bc4c4c80aca01da29d632e66f56a12322"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "2a23f03093060ceb7ff95a6f2c5a18f2ce70adf7eafe0a818da9f5995ca31142"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "067976d3ec6db0374aea884a17b7ac2d47f1f6e11c5b89ab376707ed10cd3c0b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e034b228dc020e97a0e8d7f3da883b71192fd2f924e416a94eb9b8f482b5d773"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "697ea13a84f883276a6c143719aa5c4e0c4cf89894360e60c03c6c6df0b311e2"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "ba091dface46066fdc169d86bb4ef4b2229b59b1a3f705b0067a9d6e0e6a11ef"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0f51e4e217d90c7325809373b31f618a45d85b8c48a3faebcfec13fccb9c6880"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "4429ad9ed6327f4d6f5cab91efce5d1c24f8bc8331236fdf9259118d93fe6070"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "4ca35d7e834ba3a000aac3a51495426ee22045e58e6f2a0e77188f1a93b987e1"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "3f83971f1aaa42542f507e2b6e5c575c24ce712510fbf1b014a1da8ea43333fe"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "software/amazon/awssdk/services/s3/bucketaddressingsep/VirtualAddressingSepTestCases.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e9f2671463da9b7520551a0f952193cd4dd6592bf129b376cbbbf55b56fef2aa"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-2-firebase_rtdb",
          "level": "note",
          "message": {
            "text": "Firebase Realtime Database reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "2109bf061c120ac6096a081bdf1b9762a52d8fbdf40e027fd9db9c6060ee24e4"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-6-private_key",
          "level": "note",
          "message": {
            "text": "Private key material (third-party library artifact, shared across 63 unrelated developers)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes7.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "17c183792e4d2c5123af7e5d1d8dbd89344d0f1d617cc8a9d8e9d3301a050d0b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "818a23bcc22d6ec0064c2156792e1d7d420e4c0b015f9e947d3d5f4c42550fc3"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "77c87443ea21b7f5f45e3f70368c15a7e53fa9d1d3f4a49e00acb0f0ff84872e"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0db2f481083df29c121f9dde176e66a94863a2f3a597b7fb01091b925b38e479"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        }
      ],
      "properties": {
        "analysis": {
          "issues": [],
          "stages": {
            "pii": "complete",
            "sbom": "complete",
            "signing": "certificate_parsed",
            "strings": "complete",
            "manifest": "complete"
          },
          "status": "complete",
          "grading": {
            "policy": "static-coverage-v1",
            "blockers": [],
            "eligible": true
          },
          "timings_ms": {
            "total": 35999.153,
            "harvest": 9319.870999999977,
            "detectors": 23333.42099999912
          },
          "bytes_total": 181348233,
          "bytes_scanned": 181348233,
          "bytes_skipped": 0,
          "files_processed": 6719,
          "coverage_version": 2,
          "string_encodings": [
            "ascii",
            "utf16le"
          ],
          "signature_validation": "not_performed"
        },
        "provenance": {
          "mode": "static",
          "artifacts": [
            {
              "name": "base.apk",
              "sha256": "8347ea2dc7969c5218bc419af8f7db0734d404a5a82ccca613186bf62a7cdf59"
            },
            {
              "name": "config.arm64_v8a.apk",
              "sha256": "f2c99ecb3d1615111de67b1e41a42b455e49341d097d880b483fb4d3bd1ba944"
            },
            {
              "name": "config.xxhdpi.apk",
              "sha256": "f1364a52fe163c7c78ba8b5ff9a98a818bcc9c93053e0c98758d9bc984d03937"
            }
          ],
          "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
        },
        "apk_sha256": "8347ea2dc7969c5218bc419af8f7db0734d404a5a82ccca613186bf62a7cdf59",
        "app_id": "com.nnacres.app",
        "app_title": "99acres Buy/Rent/Sell Property",
        "app_version": "16.0.34",
        "scan_id": "66c2a6ce-208a-42fc-86b3-2c9ec303acba",
        "scanned_at": "2026-10-09T01:03:31.937Z"
      }
    }
  ]
}