{
  "app": {
    "app_id": "com.gameloft.anmp.disney.speedstorm",
    "title": "Disney Speedstorm",
    "version": "1.21.0d"
  },
  "scan": {
    "scan_id": "49a971d0-229e-40d8-9729-fb47bfc43942",
    "grade": "?",
    "score": null,
    "scanned_at": "2026-10-09T12:28:43.115Z"
  },
  "analysis": {
    "issues": [
      "split_extraction_failed"
    ],
    "stages": {
      "pii": "complete",
      "sbom": "complete",
      "signing": "certificate_parsed",
      "strings": "complete",
      "manifest": "complete"
    },
    "status": "partial",
    "grading": {
      "policy": "static-coverage-v1",
      "blockers": [
        "analysis_incomplete",
        "split_extraction_failed"
      ],
      "eligible": false
    },
    "timings_ms": {
      "total": 169818.3,
      "harvest": 130322.50499999984,
      "detectors": 30261.77899999998
    },
    "bytes_total": 2179399505,
    "bytes_scanned": 2179399505,
    "bytes_skipped": 0,
    "files_processed": 1298,
    "coverage_version": 2,
    "string_encodings": [
      "ascii",
      "utf16le"
    ],
    "signature_validation": "not_performed"
  },
  "provenance": {
    "mode": "static",
    "artifacts": [
      {
        "name": "base.apk",
        "sha256": "ceb96cc28d5b6c970446311ef21fec85528b777060848c9bf42b202be2304f9c"
      },
      {
        "name": "characters.apk",
        "sha256": "135d6986f5291e54d30593e7dffc17f75dbab4992cd16822be4789407630c6b8"
      },
      {
        "name": "common.apk",
        "sha256": "eeb2b61de2d0aae05296ed45df70bd4071b9d5823e3c0c5f226b034a63508d88"
      },
      {
        "name": "config.arm64_v8a.apk",
        "sha256": "146f4be23b5e785138e5be91add2a00326f3c60fae2730bbaa83716c1b516c9f"
      },
      {
        "name": "config.en.apk",
        "sha256": "876ee1d84eb300d15a96d4cbc04006356f0ea8cf428be160108257dd8723fa67"
      },
      {
        "name": "config.xxhdpi.apk",
        "sha256": "ed047e3da69c12cfc3bc15aacac0dcfc0c5e494442afb69653150fe8a0e71fbd"
      },
      {
        "name": "go.apk",
        "sha256": "e378750eb98fa2a61013acbad05b192e145f4d466ae91980563bfef089fe5357"
      },
      {
        "name": "initial.apk",
        "sha256": "be19507711409da57383d9fecbd74227b407b7cbeaddf3748d1107d67e80d8e0"
      },
      {
        "name": "karts.apk",
        "sha256": "e1b0b8a52e8ecbc99c73277286d85354a60cf28add8f36712665eb1e0366a2cf"
      },
      {
        "name": "main.apk",
        "sha256": "b6e0fc2439007e122eb48d83948bce97fa85f9d3a3f66f28ce504d85b9cb7627"
      },
      {
        "name": "pack0.apk",
        "sha256": "c4ca86de904e4782e02138d36c25d1f915eca9eaa069e14082e4ae7c0f8af916"
      },
      {
        "name": "pack_gn.apk",
        "sha256": "5eae23ebb637cc47f763afa8c087f94c99ce0bb5310ff98260516ffe2ee49d2b"
      },
      {
        "name": "pack_lv.apk",
        "sha256": "a3e873bb35dcb2c450218eb884cd321cf7e665b943251a9d2341dd037f2caa56"
      },
      {
        "name": "pack_sd.apk",
        "sha256": "5ccf78fd476257e29e9fbcce764d740bf6a3d1e08cdd8998d7ec623bd977de82"
      },
      {
        "name": "shaders.apk",
        "sha256": "21a67b55c96fc10f91914193697eb1e452941146302693c21ae3819128748165"
      },
      {
        "name": "textures_lowres.apk",
        "sha256": "6e5d16b9e32a155768da71cc69d1975a226fbbcea8de41e85b8bb2134452cbe3"
      },
      {
        "name": "trailer.apk",
        "sha256": "5d0f0f719b7601660dabd8aa8fa628651a9797f03e9c10e1fb96520fdfc43ed2"
      }
    ],
    "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
  },
  "apk_sha256": "ceb96cc28d5b6c970446311ef21fec85528b777060848c9bf42b202be2304f9c",
  "schema": "apk-scanner.coverage/v1",
  "framework": "OWASP MASVS v2",
  "disclaimer": "Static, metadata-only analysis. Each control is scored evidence-for / gap-signal / requires-manual-testing. This is evidence toward a MASVS assessment, NOT a certification — apk-scanner.com is not an authorized assessment lab. Absence of a static finding does not prove a control passes.",
  "rows": [
    {
      "control": "MASVS-STORAGE-1",
      "category": "STORAGE",
      "title": "The app securely stores sensitive data.",
      "static": "partial",
      "status": "gap-detected",
      "count": 1,
      "findings": [
        {
          "finding_type": 20,
          "key": "google_api_key",
          "title": "Google API key (client-shipped; restriction unverified)",
          "severity": "low",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            798
          ]
        }
      ]
    },
    {
      "control": "MASVS-STORAGE-2",
      "category": "STORAGE",
      "title": "The app prevents leakage of sensitive data.",
      "static": "partial",
      "status": "gap-detected",
      "count": 3,
      "findings": [
        {
          "finding_type": 1,
          "key": "s3_bucket",
          "title": "Amazon S3 bucket reference",
          "severity": "low",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            200,
            284
          ]
        },
        {
          "finding_type": 1,
          "key": "s3_bucket",
          "title": "Amazon S3 bucket reference",
          "severity": "low",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            200,
            284
          ]
        },
        {
          "finding_type": 53,
          "key": "firebase_storage",
          "title": "Firebase Storage bucket reference",
          "severity": "low",
          "verified": false,
          "relationship": "gap-signal",
          "cwe": [
            200,
            284
          ]
        }
      ]
    },
    {
      "control": "MASVS-CRYPTO-1",
      "category": "CRYPTO",
      "title": "The app employs current strong cryptography and uses it according to best practices.",
      "static": "partial",
      "status": "gap-detected",
      "count": 1,
      "findings": [
        {
          "finding_type": 57,
          "key": "short_key",
          "title": "Short signing key (RSA 1024-bit)",
          "severity": "medium",
          "verified": false,
          "relationship": "gap-confirmed",
          "cwe": [
            326
          ]
        }
      ]
    },
    {
      "control": "MASVS-CRYPTO-2",
      "category": "CRYPTO",
      "title": "The app performs key management according to best practices.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-1",
      "category": "AUTH",
      "title": "The app uses secure authentication and authorization protocols.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-2",
      "category": "AUTH",
      "title": "The app performs local authentication securely.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-AUTH-3",
      "category": "AUTH",
      "title": "The app secures sensitive operations with additional authentication.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-NETWORK-1",
      "category": "NETWORK",
      "title": "The app secures all network traffic according to current best practices.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-NETWORK-2",
      "category": "NETWORK",
      "title": "The app verifies the identity of the remote endpoint (e.g. certificate pinning).",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PLATFORM-1",
      "category": "PLATFORM",
      "title": "The app uses IPC mechanisms securely.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PLATFORM-2",
      "category": "PLATFORM",
      "title": "The app uses WebViews securely.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PLATFORM-3",
      "category": "PLATFORM",
      "title": "The app uses the user interface securely.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-1",
      "category": "CODE",
      "title": "The app requires an up-to-date platform version.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-2",
      "category": "CODE",
      "title": "The app has a mechanism for enforcing updates.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-3",
      "category": "CODE",
      "title": "The app only uses software components without known vulnerabilities.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-CODE-4",
      "category": "CODE",
      "title": "The app validates and sanitizes all untrusted inputs and follows secure-coding practice.",
      "static": "partial",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-1",
      "category": "RESILIENCE",
      "title": "The app validates the integrity of the platform.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-2",
      "category": "RESILIENCE",
      "title": "The app implements anti-tampering mechanisms.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-3",
      "category": "RESILIENCE",
      "title": "The app implements anti-static-analysis mechanisms.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-RESILIENCE-4",
      "category": "RESILIENCE",
      "title": "The app implements anti-dynamic-analysis techniques.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-1",
      "category": "PRIVACY",
      "title": "The app minimizes access to sensitive data and resources.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-2",
      "category": "PRIVACY",
      "title": "The app prevents identification of the user.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-3",
      "category": "PRIVACY",
      "title": "The app is transparent about data collection and usage.",
      "static": "yes",
      "status": "no-static-findings",
      "count": 0,
      "findings": []
    },
    {
      "control": "MASVS-PRIVACY-4",
      "category": "PRIVACY",
      "title": "The app offers user control over their data.",
      "static": "manual",
      "status": "requires-manual-testing",
      "count": 0,
      "findings": []
    }
  ],
  "categories": [
    {
      "category": "STORAGE",
      "controls": 2,
      "gaps": 2,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "CRYPTO",
      "controls": 2,
      "gaps": 1,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "AUTH",
      "controls": 3,
      "gaps": 0,
      "verified": 0,
      "manual": 3
    },
    {
      "category": "NETWORK",
      "controls": 2,
      "gaps": 0,
      "verified": 0,
      "manual": 0
    },
    {
      "category": "PLATFORM",
      "controls": 3,
      "gaps": 0,
      "verified": 0,
      "manual": 1
    },
    {
      "category": "CODE",
      "controls": 4,
      "gaps": 0,
      "verified": 0,
      "manual": 1
    },
    {
      "category": "RESILIENCE",
      "controls": 4,
      "gaps": 0,
      "verified": 0,
      "manual": 4
    },
    {
      "category": "PRIVACY",
      "controls": 4,
      "gaps": 0,
      "verified": 0,
      "manual": 1
    }
  ]
}