{
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "apk-scanner.com",
          "informationUri": "https://apk-scanner.com",
          "version": "1.0.0",
          "rules": [
            {
              "id": "APKSCAN-37-allow_backup",
              "name": "AllowBackup",
              "shortDescription": {
                "text": "android:allowBackup=\"true\""
              },
              "fullDescription": {
                "text": "Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false."
              },
              "helpUri": "https://apk-scanner.com/finding/allow_backup",
              "help": {
                "text": "Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-530",
                  "CWE-312",
                  "MASVS-STORAGE-1",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-530",
                  "CWE-312"
                ],
                "masvs": [
                  "MASVS-STORAGE-1",
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-1-s3_bucket",
              "name": "S3Bucket",
              "shortDescription": {
                "text": "Amazon S3 bucket reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/s3_bucket",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-2-firebase_rtdb",
              "name": "FirebaseRtdb",
              "shortDescription": {
                "text": "Firebase Realtime Database reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/firebase_rtdb",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-20-google_api_key",
              "name": "GoogleApiKey",
              "shortDescription": {
                "text": "Google API key (client-shipped; restriction unverified)"
              },
              "fullDescription": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "helpUri": "https://apk-scanner.com/finding/google_api_key",
              "help": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-798",
                  "MASVS-STORAGE-1"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-798"
                ],
                "masvs": [
                  "MASVS-STORAGE-1"
                ]
              }
            },
            {
              "id": "APKSCAN-53-firebase_storage",
              "name": "FirebaseStorage",
              "shortDescription": {
                "text": "Firebase Storage bucket reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/firebase_storage",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-77-ds_underdeclare",
              "name": "DsUnderdeclare",
              "shortDescription": {
                "text": "Data Safety label omits an observed data category"
              },
              "fullDescription": {
                "text": "Update the Play Data Safety form to declare the observed data category, or remove the capability if the data is not actually collected."
              },
              "helpUri": "https://apk-scanner.com/finding/ds_underdeclare",
              "help": {
                "text": "Update the Play Data Safety form to declare the observed data category, or remove the capability if the data is not actually collected."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-359",
                  "MASVS-PRIVACY-3"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-359"
                ],
                "masvs": [
                  "MASVS-PRIVACY-3"
                ]
              }
            },
            {
              "id": "APKSCAN-35-exported_provider",
              "name": "ExportedProvider",
              "shortDescription": {
                "text": "Exported ContentProvider without permission"
              },
              "fullDescription": {
                "text": "Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly."
              },
              "helpUri": "https://apk-scanner.com/finding/exported_provider",
              "help": {
                "text": "Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly."
              },
              "defaultConfiguration": {
                "level": "warning"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-926",
                  "CWE-284",
                  "MASVS-PLATFORM-1"
                ],
                "security-severity": "5.0",
                "cwe": [
                  "CWE-926",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-PLATFORM-1"
                ]
              }
            },
            {
              "id": "APKSCAN-62-sbom_cve",
              "name": "SbomCve",
              "shortDescription": {
                "text": "Bundled component with a known CVE"
              },
              "fullDescription": {
                "text": "Confirm the bundled version, then upgrade the dependency to a patched release; track third-party components in an SBOM."
              },
              "helpUri": "https://apk-scanner.com/finding/sbom_cve",
              "help": {
                "text": "Confirm the bundled version, then upgrade the dependency to a patched release; track third-party components in an SBOM."
              },
              "defaultConfiguration": {
                "level": "warning"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-937",
                  "CWE-1104",
                  "MASVS-CODE-3"
                ],
                "security-severity": "5.0",
                "cwe": [
                  "CWE-937",
                  "CWE-1104"
                ],
                "masvs": [
                  "MASVS-CODE-3"
                ]
              }
            }
          ]
        }
      },
      "automationDetails": {
        "id": "apk-scanner/com.textmeinc.textme/cf808ec1-c715-42c6-91ff-1035155ad575"
      },
      "invocations": [
        {
          "executionSuccessful": true
        }
      ],
      "results": [
        {
          "ruleId": "APKSCAN-37-allow_backup",
          "level": "note",
          "message": {
            "text": "Application data is backup-enabled"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8"
          },
          "properties": {
            "severity": "info",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "9247301e93051a35c120edc01d394a1553b7f1b5736d714849586062b6009142"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d90a81845fdf4c8d569d0c233a9014b8f26f7f6b1511b299e003a74f05523796"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "6d56ce60c10f6254a0cf8ffede8de77e4f2910cbfa9d8c52362d7ac53892f485"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0d173f7fd9f259a5d8f198f566c08791c1ba03a1d0c80adfc41a29117de3d5bb"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "54b8c29e7c11c09185a4d22656211dec43b3189c060913a9ed520631ea411ceb"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "ec68c70fd925aaaf77ee2d4b4d9c157e0052ae98552eae8a26d390a44a2367d3"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "b81497cc8dae54cf78faf51ef0c5e36124e0e0cbc737c498e1d634340fe2754d"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "bb363e16d7fb8f3bc8ae0f971d368127eaf4fd761177e076c3b09aaa1edc9f06"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "529c77bf4e047d399b4c803d139477ed838a874e1521956ea8cee50c513e394c"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "65d0be834384699b8075cd5bdb9ed9920f88b2ee7411cefb1dbadebd6a0a0b0b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a9c746d1eadfc5a252a43ffe28495c210bb3cd644ea6fdaf616c29fdd037e138"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "ebf290e8a44e38bd8ba8108fa64b4edb150f759531b91a3a8f59943da5697435"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d4e431d8303b6d2502dfeb3a32f04bdd204255b4f092b468ed14a2f2a158306b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0ef1ff49e3d9eedf95aacf6c29fb6a01cbbee070c9adef12dd3129bcbea722b7"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "3c18f77e2d441be4630802c118fed6ea840a10e49136aa24aca7fe99d66a615a"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d2b2b35da8ce96bc58f3eab3de91aed2b93d516394c19fc3bbbe542a8203fa19"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "15a2d96bc4b5e1439e4742d1e468e33d721c8e2db7f9b6cccebbf6ffa2beb255"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "7095d3d2924e2e56478d6c4e130838861fc60f591706c3618fba79a4ac36184c"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "03cd362b563d5eded9ffba2e38822f8a977e713a09dd9f8b3ecdf705c1c7cec2"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "296ca6bf29e6d6009b329fd1ac44eaa23cfb9cb4790daa5330d96a10d2218253"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "f58066cb17bb3848af73b28b27ac07f15868d44d1ef1176b1fe2cfa7a5bbb35f"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/inapp.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "875afc799bd230856eb5cf5f4da521897c6608450f7ce5a80f884a4ee550680c"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "ac0ed6d029664a1b60aadb7fe16f53b125afbc943ce2331a477cebe9dac7b17c"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e9b822f340eecea49b1a52395ad6d0ac898dd3e70adc78b96780261c6885e0df"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0be4c87324d847a47f3f28cafeecab73594479f5f6d07fb5c31fec7b2e9136a7"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "20acea0a7ff93385ae9cdb156b5edae052324583f5484a917930368ee8daa942"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "483ff28eb8439abea7752d92612ee595fbac3c784878d915a140e85204258c21"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "f826426f4d3a357293e0174dfe5852c716c5f09c5bdc314bafb4d70d66f9f499"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "4198541657cad0a6553eeb7c860d0fff4b38338dca74655c6c2723a7c42746ce"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "8ccbb55a67fc2175e9a65cc737cb6157ce71ade64fe12b148caeb194c395477c"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "6ef33c9dbaa2a74d902a864f8d2722c91aa3ec97b303e06543c5654a8702363b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "9634fac2813b22b4a09cf36389fe7b3f4cd8687c7d9a81021c0ba07e1c7bc890"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "129e3c47be18bd84b86454199cc12ad62fa3da3224d87ad2244c5f0bf9f639cf"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "689a375a725cf49a41c2ce32a428f7724c3822380e75fa8ad06f7841ca2f34a3"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "5ed0958b3e723666eb7e6c465f98fd8c623091dfbcbb621a364d95b0b56fee36"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/mock_upsell_response.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "fff9c55b0e2f1a7793153c44b558830af512c6efecf4f89bfbd5a1141ae6a80d"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a26361f187726072895fed4de50f9098aae69b6a3e1d3abda22ce905dc6e3d90"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a40ce414f77d9890b36f745a5535a2e3cf03524a796e0f01db5e2e37ffb217b5"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "f221c9d386f409380b0bc18d5b173a0ae4758e42e642bd2e2028c56f4efd6e39"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "1ee390861eff252ef9c747c218d5509bf81b3360c4b4fcc0400e4d9bcd2f4044"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "res/raw/demo_products.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "9b255c137ffd352e2313adad011c14f807471c9f1bbbad198dac248210fad487"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-2-firebase_rtdb",
          "level": "note",
          "message": {
            "text": "Firebase Realtime Database reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "bc0cce3c83bff8a388698a08ab820ee402f8336f832fe37c724000075a35ee06"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes9.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "6debb3ede5301e56902bb488410c20e1fbdaa738f6386b962d6a981c4049d254"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes3.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0dd7733861247168e71db297ed3192c379054d6c003554989c2cb089e6e18d49"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-53-firebase_storage",
          "level": "note",
          "message": {
            "text": "Firebase Storage bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "google/api/backend.proto"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "b6e2cb8eb4bf3d0a7bcb1c02e7aaa6b80181f3fefcd2655ab608c7c76f9d6977"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-53-firebase_storage",
          "level": "note",
          "message": {
            "text": "Firebase Storage bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "google/api/endpoint.proto"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "6da605c01a32d6178ae1e6876876e3de02277efaeb0bf30b781056b6efdcc7a8"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-77-ds_underdeclare",
          "level": "note",
          "message": {
            "text": "Data Safety label omits Location"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "data-safety:Location"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "cacfd47daa7d0aafb7cbd1791f3964ef2850687203797b5e24429c41acdf7290"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "warning",
          "message": {
            "text": "Exported content provider without permission"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:inc.textme3.data.local.provider.RingtoneProvider"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "7f6234c8a8f338ddf167f6ef0970b221ed9dc36da6692b81dfd5ddc76b643a8b"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-62-sbom_cve",
          "level": "warning",
          "message": {
            "text": "com.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "sbom:com.squareup.okhttp3:okhttp:CVE-2021-0341"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "b35496237e28b68c8e0d69cddebe93abcbdeb329cec963569542cc48edb144a4"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-signal"
          }
        }
      ],
      "properties": {
        "analysis": {
          "issues": [],
          "stages": {
            "pii": "complete",
            "sbom": "complete",
            "signing": "certificate_parsed",
            "strings": "complete",
            "manifest": "complete"
          },
          "status": "complete",
          "grading": {
            "policy": "static-coverage-v1",
            "blockers": [],
            "eligible": true
          },
          "timings_ms": {
            "total": 38612.539,
            "harvest": 9043.799999999947,
            "detectors": 27201.15300000056
          },
          "bytes_total": 189178255,
          "bytes_scanned": 189178255,
          "bytes_skipped": 0,
          "files_processed": 4955,
          "coverage_version": 2,
          "string_encodings": [
            "ascii",
            "utf16le"
          ],
          "signature_validation": "not_performed"
        },
        "provenance": {
          "mode": "static",
          "artifacts": [
            {
              "name": "base.apk",
              "sha256": "b9ff83563dad7e6952eb05074529cfcf9a96fee332c5c1b4279574f837c744d8"
            },
            {
              "name": "config.arm64_v8a.apk",
              "sha256": "ebd763ba6378899ff183bb7f30085d492206fdeaa73998d0af52bc9b87bcb8ba"
            },
            {
              "name": "config.en.apk",
              "sha256": "77c809e736fed9fc7a2209cea7fbbd95e714d95015725c2af789429b00e00330"
            },
            {
              "name": "config.xxhdpi.apk",
              "sha256": "2a739fb4b685d092ff3123146e8fa9d22800d852aa98e7b2792e6c4a32e2f783"
            }
          ],
          "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
        },
        "apk_sha256": "b9ff83563dad7e6952eb05074529cfcf9a96fee332c5c1b4279574f837c744d8",
        "app_id": "com.textmeinc.textme",
        "app_title": "Text Me: Second Phone Number",
        "app_version": "3.56.2",
        "scan_id": "cf808ec1-c715-42c6-91ff-1035155ad575",
        "scanned_at": "2026-10-06T17:16:24.812Z"
      }
    }
  ]
}