I run fortify scan on an Android Project (Java), and got some issues. The report did not suggest how to fix it.
It marked the launcher class which have manifest-decla