MAST scanner
Last updated: Oct 20, 2026
For common configuration file keys that apply to all scanners, see Use a configuration file.
Specific configuration file keys
The MAST scanner (which analyzes .apk files) supports one specific
configuration key, apk:
apk
This key has two configuration options:
include(optional; provide at least one path for a useful scan): Paths to files or directories to analyzeexclude(optional): Files or directories to exclude from the analysis
For example:
apk:
include:
- relative/path/to/directory/
# Optional keys
exclude:
- src/**/test*.apkFor instructions on how to specify paths in the include and exclude subsections,
see Use a configuration file.
Configuration file example
Below is an example of a highly personalized configuration file:
namespace: my_app
working_dir: ./
commit: e59607b9de3ef4c13d292705fg3da1ff0c67eb38
language: EN
output:
file_path: /fluid-attacks-results.csv
format: CSV
apk:
include:
- "**/*.apk"
exclude:
- src/test/test_apk.apkHave a question about the scanner or encountered a problem? Read "Scanner FAQ".
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' pentesting team, complete this contact form.