{
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "apk-scanner.com",
          "informationUri": "https://apk-scanner.com",
          "version": "1.0.0",
          "rules": [
            {
              "id": "APKSCAN-22-slack_token",
              "name": "SlackToken",
              "shortDescription": {
                "text": "Slack token"
              },
              "fullDescription": {
                "text": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
              },
              "helpUri": "https://apk-scanner.com/finding/slack_token",
              "help": {
                "text": "Remove the hard-coded credential from the app package, rotate/revoke it immediately, and move the secret to a backend the app calls with per-user authentication."
              },
              "defaultConfiguration": {
                "level": "error"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-798",
                  "MASVS-STORAGE-1"
                ],
                "security-severity": "8.0",
                "cwe": [
                  "CWE-798"
                ],
                "masvs": [
                  "MASVS-STORAGE-1"
                ]
              }
            },
            {
              "id": "APKSCAN-1-s3_bucket",
              "name": "S3Bucket",
              "shortDescription": {
                "text": "Amazon S3 bucket reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/s3_bucket",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-2-firebase_rtdb",
              "name": "FirebaseRtdb",
              "shortDescription": {
                "text": "Firebase Realtime Database reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/firebase_rtdb",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-20-google_api_key",
              "name": "GoogleApiKey",
              "shortDescription": {
                "text": "Google API key (client-shipped; restriction unverified)"
              },
              "fullDescription": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "helpUri": "https://apk-scanner.com/finding/google_api_key",
              "help": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-798",
                  "MASVS-STORAGE-1"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-798"
                ],
                "masvs": [
                  "MASVS-STORAGE-1"
                ]
              }
            },
            {
              "id": "APKSCAN-53-firebase_storage",
              "name": "FirebaseStorage",
              "shortDescription": {
                "text": "Firebase Storage bucket reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/firebase_storage",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-72-sentry_dsn",
              "name": "SentryDsn",
              "shortDescription": {
                "text": "Sentry DSN"
              },
              "fullDescription": {
                "text": "A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events."
              },
              "helpUri": "https://apk-scanner.com/finding/sentry_dsn",
              "help": {
                "text": "A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            }
          ]
        }
      },
      "automationDetails": {
        "id": "apk-scanner/notion.id/528eb26c-62d6-43df-9cb1-5e00856fa7fe"
      },
      "invocations": [
        {
          "executionSuccessful": true
        }
      ],
      "results": [
        {
          "ruleId": "APKSCAN-22-slack_token",
          "level": "error",
          "message": {
            "text": "Slack token"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/NboPage-aaa89c8353f98034.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a35849b1a9ebed49f7fa7a8faa071d0c16182dcdd04df721c298316eac00519f"
          },
          "properties": {
            "severity": "high",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-22-slack_token",
          "level": "error",
          "message": {
            "text": "Slack token"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/NboPage-aaa89c8353f98034.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0afde3ba874d532aebbe89f008faa173327aeaf3de95c94fdb4076aa78fa8f77"
          },
          "properties": {
            "severity": "high",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes3.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e10d2a5e012a5f862033ab2c9cc8ed8a93dfcebeea58499ad70990e746a166b5"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes3.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "2bd1ec2029e55f3d19a0924b42088bd7524e663d61c9a9d8158059a333c8d4a7"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes3.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a5d48bee9b6ae34695e04f4030f223cf24bc2a21a9372477e8f0a6aa85fed87e"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "2892c48f206d1ab4d6187a881bcb18f960adf5aa445276bf31cea84d984e9194"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes3.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "48252ccf3709809a347c289ef5c4f932bf38ab4f2f13119bf6f1a1a38df44787"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/UISpacePermissionGroupToken-a8e3db713f15f7f8.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d123d9e2d80ac1ca3fb985d038e973cdb6fbe225d76680165a085f71779a465c"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/UISpacePermissionGroupToken-a8e3db713f15f7f8.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d9462270920b159864f166e743040c78901592a53705a8cd93e257add55f96f2"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/UISpacePermissionGroupToken-a8e3db713f15f7f8.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "886c02bc561dc7850da710cabcd125206afd6f151c2730ac9bf4f268bfce5d05"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/RecordMap-f382a125222dc2fa.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "10bc69fe9a4131e650991b12f18e08a5c9085801ef034d704928a70bbd2d12e7"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/RecordMap-f382a125222dc2fa.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "61ee44cfda1cc6126785cde174faef57aece584d064ddfe89098e77b0c99019f"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/LocalizedTemplates-ec4a608b01d93d6a.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "56a62a0cc565f97bcebeeb291fd1a19915395866637f5bc723e55fc15b357af9"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "c6781d27ac518abaa262aabc44017c82d38c6b5fa9f8e31aaceceb96d040a800"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "177220814b56dcbcdfe315dda96d99ef6176bce3e7c1886d0051bfdbcbcfbddc"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "886faa9960d4f41a0d052767cb6374cc57e36569941ec89793c59d18ad53fe2b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "098198daf4f952efba57af91c94474d4e44949bd0a813db0a8b5327c35ae8d92"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "af21b96de44610356bc1e6760a684efb22e134db9dbbcefa6f8f63f10bb28e5f"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "78bc6ff4df3458d85f56ddf2c01c2e758c71ff0386ca89b1ef30873d8e297754"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "489cc2f392446c18c7b86a6681170f0fdc2f3e8220ad0c426c87b7d2e190ff23"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a57a619a277860d063421cfc2539589b5c086d4baf2d14196683fa4f02261efb"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0f3016499a85381fd8c8cdb51fed3ea3845f97a64c2f89c60831eba33ce7a9be"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "afc32801c44a42e92303bd762cd9542f63f4d336087de829ad18f66be3d8aa4e"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "91ec5c32040dffcefb789cdf772041f54d929c76495e35e5432cd4a6ef930b73"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "c50cc3941734ac822a4ea64ca70497d5877fc09cabfc499ab4094d429e04ef4d"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "281e09c74489f4b3dcab215819068f150652b7037c46686bc0b57129465a8414"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e780216edfd87762b4d0338350754bdb5da7439f9be83b8e74c6caf0118d4f17"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "5b003c617302c518c571307f9b21803d9a86a74a2cd728662c3cc9bb9d53f155"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "26c7c21efa6f93c07171b454f626cfc0171ddfdca1a7650ea2718344daaa6bd2"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "94335948336b71540f9bf86912affd4e6361ea9a97f2fdd45eda3ee04c313396"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "75f2f1c2d84a11d9954bfb7d2b9ff951ab39c89e3cc07d43aa60d5bca6b4a49f"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d7f5acdae7e4cdd1400f23ef6c321c89fbacf14f21a6f2b54fc592306ad04116"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "add60b62213af148cbef992ef58c4e22ae53caccb55046ace121cff46536c742"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "43bfaecf51fc783e14ce0537496b841d72956456838baa74ff31420ad171e915"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "48cbe775fb5951e06c50d723296cd8ee13290aa78c76a16b916d6b123ec33e1d"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets.json"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e210116779f90c5b9966b1da0631cc417d8471a0f19cbc830d25b3ad7ad3f2cc"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/41873-727822f70670888b.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "eb9e94b79052a0436978c34abbde0f3dd686109fd8e4e73ae0912d54cf1d0fab"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/33732-9afddd845926eae2.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e7bd2da0c0fb655fccf0ce09ad37de270d40e0c695419e35c4c3304952d31375"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/33732-9afddd845926eae2.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "5caa2b6fe35d27854fd53016c6bd17adc411a146d2f671d67072f7d494be1cc0"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/33732-9afddd845926eae2.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "10537a2de2f4ac361eef7b5883a381ae975d031ce94f943517c0f11341c2ced1"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/NboPage-aaa89c8353f98034.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "e4ea84324d5a9a1729ec48c1d746b1b49f4634ac36309b907022016cd193eefc"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/CreatorProfile-626727a811fda7b7.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "0511ca3162b6dfbe2f5ae6ef83d33a78966e7296cdc7f07fdd46b88ea3b5305f"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "fb6eb30e1f18bee3031237c0c232a381131d191bc56efb7b3644c091220cebcd"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "600845e5da4e3cb4cee1182f794f3c1d9a398079f35dcf9d4d9f004fbd5d65d4"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "08bfeb54b758523905128993e262b08e005b2a39df3687fa9421f6ec2c4ea856"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "5337c50830eb973f79f9c12786de1ea4bfcb69028eefe449aabae022a368770c"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes3.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "50d8ce34d68146c48ef68a787b635c30770c686114e0952f6a86da494895f943"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "099e84890684a56952664839d53f00955b1052d00fff4a5c5603395b278fb7fd"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "bcbb1799b7c4155f06262c90bb1904492d85d5005eb9a5dc64e8d95f872b6f55"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "b7664883dc0bf5e0f893f4370bd3ad88e35c995ea7177073c640ecba63dd67f7"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a215c31cb81e810456095319852d42bb4b17fd583891c027da8dac9d973164a0"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-1-s3_bucket",
          "level": "note",
          "message": {
            "text": "Amazon S3 bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/app-a8d179a164417daf.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "15ab0418df63b55e442c7f9d779149a9818194b0046d3b4c74476c059844b1b7"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-2-firebase_rtdb",
          "level": "note",
          "message": {
            "text": "Firebase Realtime Database reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "8a6ebc4f69a9f054a082d40b6c9bb98109678a7d65d8daf0f45cdb0ddc9aed02"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "bbd6d6163ae86dba97bcc2355484aa5b8884f9fc9fd21291e60936d5f5751416"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-53-firebase_storage",
          "level": "note",
          "message": {
            "text": "Firebase Storage bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "2953c50874b251de34b3086b8cb9334a32c0d5fae35a79f4b39f485696c94d74"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-53-firebase_storage",
          "level": "note",
          "message": {
            "text": "Firebase Storage bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "google/api/endpoint.proto"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "6da605c01a32d6178ae1e6876876e3de02277efaeb0bf30b781056b6efdcc7a8"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-53-firebase_storage",
          "level": "note",
          "message": {
            "text": "Firebase Storage bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "google/api/backend.proto"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "b6e2cb8eb4bf3d0a7bcb1c02e7aaa6b80181f3fefcd2655ab608c7c76f9d6977"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-72-sentry_dsn",
          "level": "note",
          "message": {
            "text": "Sentry DSN"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "assets/bundle/assets/_assets/mobile/sentry-208552c8c2df949d.js"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "23345a562b4162bf033b5bc9296f58261114b87a11e10ccb299615ba9eb70f53"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "informational"
          }
        }
      ],
      "properties": {
        "analysis": {
          "issues": [],
          "stages": {
            "pii": "complete",
            "sbom": "complete",
            "signing": "certificate_parsed",
            "strings": "complete",
            "manifest": "complete"
          },
          "status": "complete",
          "grading": {
            "policy": "static-coverage-v1",
            "blockers": [],
            "eligible": true
          },
          "timings_ms": {
            "total": 158386.554,
            "harvest": 13059.999999999907,
            "detectors": 140741.87000000075
          },
          "bytes_total": 341576008,
          "bytes_scanned": 341576008,
          "bytes_skipped": 0,
          "files_processed": 6661,
          "coverage_version": 2,
          "string_encodings": [
            "ascii",
            "utf16le"
          ],
          "signature_validation": "not_performed"
        },
        "provenance": {
          "mode": "static",
          "artifacts": [
            {
              "name": "base.apk",
              "sha256": "04d15be36e1539123504143b5f6a5e33cd77ef512e5e78cde9d87bf12084a18f"
            },
            {
              "name": "config.arm64_v8a.apk",
              "sha256": "c8d73a41548c3f817d0a29af07c100859f9d0964552006314bc2984965bb9b5d"
            },
            {
              "name": "config.en.apk",
              "sha256": "165a36ebcf41d3154e98d69d01861e5d3f58feb099653f5ef44f3a0cc9f6e6e2"
            },
            {
              "name": "config.xxhdpi.apk",
              "sha256": "8c6271f10bfe80d64ab0784c22513856b5ad357bc298e2194b3cd86e789043d9"
            }
          ],
          "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
        },
        "apk_sha256": "04d15be36e1539123504143b5f6a5e33cd77ef512e5e78cde9d87bf12084a18f",
        "app_id": "notion.id",
        "app_title": "Notion: AI Workspace",
        "app_version": "0.6.4196",
        "scan_id": "528eb26c-62d6-43df-9cb1-5e00856fa7fe",
        "scanned_at": "2026-10-08T18:06:32.478Z"
      }
    }
  ]
}