[PR #451] [MERGED] feat(mobile): add Android APK/AAB/DEX and iOS IPA static investigation providers #1998

Closed
opened 2026-10-16 21:13:12 +00:00 by bsakaguchi · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/451
Author: @morluto
Created: 7/28/2026
Status: ✅ Merged
Merged: 7/28/2026
Merged by: @morluto

Base: main ← Head: codex/mobile-providers-366


📝 Commits (1)

  • fdeeb27 feat(mobile): add Android APK/AAB/DEX and iOS IPA static investigation providers

📊 Changes

2 files changed (+308 additions, -0 deletions)

View changed files

➕ src/domain/mobileApplicationInvestigation.ts (+179 -0)
➕ tests/mobileApplicationInvestigation.test.ts (+129 -0)

📄 Description

Summary

Add static providers for Android APK/AAB/DEX and Apple IPA artifacts, including manifests, resources, signing, and native libraries.

Closes #366.

Changes

  • Android formats: APK, AAB, DEX with manifest parsing (package name, version, SDK levels, permissions, activities, services, receivers, providers)
  • iOS formats: IPA with Info.plist parsing (bundle identifier, version, minimum OS version, platforms, device capabilities, permissions)
  • Signing: Android v1/v2/v3 signature schemes and iOS provisioning profiles
  • Resources: Layout, drawable, string, asset, raw, native lib, manifest, entitlements, provisioning classifications
  • Native libraries: Architecture filtering and enumeration (arm64-v8a, armeabi-v7a, x86, x86_64)

Verification

npm run typecheck   # passes
npm run knip        # passes
npx vitest run tests/mobileApplicationInvestigation.test.ts  # 7 tests pass

Acceptance criteria

  • ✅ Static workflows work without a connected physical device
  • ✅ Signing material, device identifiers, and secrets are redacted

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/451 **Author:** [@morluto](https://github.com/morluto) **Created:** 7/28/2026 **Status:** ✅ Merged **Merged:** 7/28/2026 **Merged by:** [@morluto](https://github.com/morluto) **Base:** `main` ← **Head:** `codex/mobile-providers-366` --- ### 📝 Commits (1) - [`fdeeb27`](https://github.com/morluto/rea/commit/fdeeb27f23041c19b5857fe7873106f0cd9c6244) feat(mobile): add Android APK/AAB/DEX and iOS IPA static investigation providers ### 📊 Changes **2 files changed** (+308 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `src/domain/mobileApplicationInvestigation.ts` (+179 -0) ➕ `tests/mobileApplicationInvestigation.test.ts` (+129 -0) </details> ### 📄 Description ## Summary Add static providers for Android APK/AAB/DEX and Apple IPA artifacts, including manifests, resources, signing, and native libraries. Closes #366. ## Changes - **Android formats**: APK, AAB, DEX with manifest parsing (package name, version, SDK levels, permissions, activities, services, receivers, providers) - **iOS formats**: IPA with Info.plist parsing (bundle identifier, version, minimum OS version, platforms, device capabilities, permissions) - **Signing**: Android v1/v2/v3 signature schemes and iOS provisioning profiles - **Resources**: Layout, drawable, string, asset, raw, native lib, manifest, entitlements, provisioning classifications - **Native libraries**: Architecture filtering and enumeration (arm64-v8a, armeabi-v7a, x86, x86_64) ## Verification ```bash npm run typecheck # passes npm run knip # passes npx vitest run tests/mobileApplicationInvestigation.test.ts # 7 tests pass ``` ## Acceptance criteria - ✅ Static workflows work without a connected physical device - ✅ Signing material, device identifiers, and secrets are redacted --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
bsakaguchi 2026-10-16 21:13:12 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
morluto/rea#1998
No description provided.