{
  "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "apk-scanner.com",
          "informationUri": "https://apk-scanner.com",
          "version": "1.0.0",
          "rules": [
            {
              "id": "APKSCAN-2-firebase_rtdb",
              "name": "FirebaseRtdb",
              "shortDescription": {
                "text": "Firebase Realtime Database reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/firebase_rtdb",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            },
            {
              "id": "APKSCAN-6-private_key",
              "name": "PrivateKey",
              "shortDescription": {
                "text": "Private key material"
              },
              "fullDescription": {
                "text": "Never ship private-key material in a client. Revoke/rotate the compromised key and hold it server-side or in a hardware-backed store."
              },
              "helpUri": "https://apk-scanner.com/finding/private_key",
              "help": {
                "text": "Never ship private-key material in a client. Revoke/rotate the compromised key and hold it server-side or in a hardware-backed store."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-321",
                  "MASVS-CRYPTO-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-321"
                ],
                "masvs": [
                  "MASVS-CRYPTO-2"
                ]
              }
            },
            {
              "id": "APKSCAN-20-google_api_key",
              "name": "GoogleApiKey",
              "shortDescription": {
                "text": "Google API key (client-shipped; restriction unverified)"
              },
              "fullDescription": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "helpUri": "https://apk-scanner.com/finding/google_api_key",
              "help": {
                "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-798",
                  "MASVS-STORAGE-1"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-798"
                ],
                "masvs": [
                  "MASVS-STORAGE-1"
                ]
              }
            },
            {
              "id": "APKSCAN-35-exported_provider",
              "name": "ExportedProvider",
              "shortDescription": {
                "text": "Exported ContentProvider without permission"
              },
              "fullDescription": {
                "text": "Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly."
              },
              "helpUri": "https://apk-scanner.com/finding/exported_provider",
              "help": {
                "text": "Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-926",
                  "CWE-284",
                  "MASVS-PLATFORM-1"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-926",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-PLATFORM-1"
                ]
              }
            },
            {
              "id": "APKSCAN-53-firebase_storage",
              "name": "FirebaseStorage",
              "shortDescription": {
                "text": "Firebase Storage bucket reference"
              },
              "fullDescription": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "helpUri": "https://apk-scanner.com/finding/firebase_storage",
              "help": {
                "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open."
              },
              "defaultConfiguration": {
                "level": "note"
              },
              "properties": {
                "tags": [
                  "security",
                  "CWE-200",
                  "CWE-284",
                  "MASVS-STORAGE-2"
                ],
                "security-severity": "2.0",
                "cwe": [
                  "CWE-200",
                  "CWE-284"
                ],
                "masvs": [
                  "MASVS-STORAGE-2"
                ]
              }
            }
          ]
        }
      },
      "automationDetails": {
        "id": "apk-scanner/ru.mail.mailapp/ca9c1b12-1bde-432c-a1cb-b6428c44d301"
      },
      "invocations": [
        {
          "executionSuccessful": true
        }
      ],
      "results": [
        {
          "ruleId": "APKSCAN-2-firebase_rtdb",
          "level": "note",
          "message": {
            "text": "Firebase Realtime Database reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "9dd8f8228293b9a6a299894acdf2ad10f806ba09e81773e73ca250620b956665"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-6-private_key",
          "level": "note",
          "message": {
            "text": "Private key material (third-party library artifact, shared across 185 unrelated developers)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes21.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "b3a7390831348120a1fa906e96355885d14f7987e784904a539fe5b3582cdb20"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-6-private_key",
          "level": "note",
          "message": {
            "text": "Private key material (third-party library artifact, shared across 185 unrelated developers)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "classes21.dex"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "62a91e02911570689478feddb8e4a248b9f061c782ed638a6f16cd7234cf99d3"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d292159a1fe105f4c3197c3fb86944dfa0556d738c0f231e217ae21adb981c6b"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-20-google_api_key",
          "level": "note",
          "message": {
            "text": "Google API key (client-shipped; restriction unverified)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "a2a3b7c847018ee7fb737127aacc2afebe8dab0f7e623d4e8e7936356d3e5966"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "note",
          "message": {
            "text": "Exported content provider without permission (third-party library artifact, shared across 4 unrelated developers)"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:eid.contentprovider.VkpnsDeviceIdContentProvider"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "f143d87f22e1204bc21f181dfc495b09a6346f3cc6c7d5e297eac4dc95a897f6"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-53-firebase_storage",
          "level": "note",
          "message": {
            "text": "Firebase Storage bucket reference"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "resources.arsc"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "8898de147e125c01fcfb0b627b6720ec8ba671574299a6075fa54cbec1733948"
          },
          "properties": {
            "severity": "low",
            "verified": false,
            "relationship": "gap-signal"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "warning",
          "message": {
            "text": "Exported content provider without permission"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:ru.mail.util.push.NotificationSoundProvider"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "fba2a0bc59efa54db39939b36104a2bf72c551471a54463ad66e45475691117d"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "warning",
          "message": {
            "text": "Exported content provider without permission"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:ud.upload.internal.provider.FilesContentProvider"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "2480c2b6d19c07368fba383ad4b252b3876a3263545ce6739afe7510f3946aaa"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        },
        {
          "ruleId": "APKSCAN-35-exported_provider",
          "level": "warning",
          "message": {
            "text": "Exported content provider without permission"
          },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": {
                  "uri": "AndroidManifest.xml:pload.internal.provider.DoneItemsContentProvider"
                }
              }
            }
          ],
          "partialFingerprints": {
            "apkscanFingerprint": "d64a05e16cc3c7b71bbb29417bff9f36ec15243d25a871bba2c241498a4fb4d1"
          },
          "properties": {
            "severity": "medium",
            "verified": false,
            "relationship": "gap-confirmed"
          }
        }
      ],
      "properties": {
        "analysis": {
          "issues": [],
          "stages": {
            "pii": "complete",
            "sbom": "complete",
            "signing": "certificate_parsed",
            "strings": "complete",
            "manifest": "complete"
          },
          "status": "complete",
          "grading": {
            "policy": "static-coverage-v1",
            "blockers": [],
            "eligible": true
          },
          "timings_ms": {
            "total": 97655.171,
            "harvest": 18426.514999999912,
            "detectors": 74037.39500000012
          },
          "bytes_total": 368615180,
          "bytes_scanned": 368615180,
          "bytes_skipped": 0,
          "files_processed": 10048,
          "coverage_version": 2,
          "string_encodings": [
            "ascii",
            "utf16le"
          ],
          "signature_validation": "not_performed"
        },
        "provenance": {
          "mode": "static",
          "artifacts": [
            {
              "name": "base.apk",
              "sha256": "737dcad2a7c5796aa991a1a25e8f436b85a0aaf6db863cb214280766bc5ba370"
            },
            {
              "name": "config.arm64_v8a.apk",
              "sha256": "ce404ad6fb5c50462c80ae54b3e9cca1df993244976edc7422bd7c2eec29cfae"
            },
            {
              "name": "config.xxhdpi.apk",
              "sha256": "37e6141116eecc266e612bf0d797e27270e20738c6913fa0e1fd2d9ac32ef3f9"
            }
          ],
          "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
        },
        "apk_sha256": "737dcad2a7c5796aa991a1a25e8f436b85a0aaf6db863cb214280766bc5ba370",
        "app_id": "ru.mail.mailapp",
        "app_title": "Mail: Email, Cloud, Calendar",
        "app_version": "15.107.0.148045",
        "scan_id": "ca9c1b12-1bde-432c-a1cb-b6428c44d301",
        "scanned_at": "2026-10-08T18:14:01.664Z"
      }
    }
  ]
}