{
  "ok": true,
  "app_id": "com.gojek.gopay",
  "comparable": true,
  "comparison_status": "comparable",
  "regressed": false,
  "grade_delta": "A ← A",
  "score_delta": 0,
  "from": {
    "scan_id": "359b4589-4251-489e-ac18-d39dcf3c09f8",
    "version": "2.18.3",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 12869.336,
        "harvest": 4141.975000000006,
        "detectors": 7417.766999999987
      },
      "bytes_total": 96407390,
      "bytes_scanned": 96407390,
      "bytes_skipped": 0,
      "files_processed": 2047,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "a4bf28643a659a2b752cac31f0d9381bd0fb531ca3402cf5866fee248e1bf9e8"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "de70561f08ba1cae9b616f23cf046c8f55a2d7431c5d932eeb80384fa3d2921a"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "72140e6c9158ccd8b4f3a74e0fe6fd2f09e6547e0851ef55ce42792adc43a256"
        }
      ],
      "ruleset_sha256": "a4c4120389ccc4b44afa23b5786f6b8d2bf3dc47ca546355bb3ef6da4a54b513"
    },
    "grade": "A",
    "score": 90,
    "scanned_at": "2026-10-01T07:21:55.759Z"
  },
  "to": {
    "scan_id": "c7084578-770e-43de-a407-6c706a5f8ba3",
    "version": "2.20.1",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 13266.19,
        "harvest": 4292.320000000004,
        "detectors": 7484.629999999995
      },
      "bytes_total": 99794874,
      "bytes_scanned": 99794874,
      "bytes_skipped": 0,
      "files_processed": 2043,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "55dff73c2bd750a5458a4f46a93839d61042b6d91d3e9d901b725180c38441f2"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "a599d6a885fed437a8242d3a0b56ed7e947dadfe5ce6aff75e6406a1c900484f"
        },
        {
          "name": "config.xxhdpi.apk",
          "sha256": "df7ec9d7792e23be60bdb00dad776cc6eab8370049b9f4aa4f17930bcc4aaaf0"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "A",
    "score": 90,
    "scanned_at": "2026-10-08T07:32:42.124Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 84,
        "severity": "low",
        "title": "Alibaba Cloud OSS bucket reference",
        "fingerprint": "bfeeea31d06b894b268f1cafa20e4c462f4c0b9e24b4496a288f56dd9e758b94",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "0ca2bd36d87b690e8693d35695f528cbce63ddece3c038a613875b562658029a",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 84,
        "severity": "low",
        "title": "Alibaba Cloud OSS bucket reference",
        "fingerprint": "c36b59824faa50e5475ed5990f0f1ddc452d39e750db4b54c71fe176cb9e541f",
        "verified": false
      },
      {
        "finding_type": 35,
        "severity": "medium",
        "title": "Exported content provider without permission",
        "fingerprint": "ed47b69e040f2d912ea57e7ecff2ff13f138deb690f888c91ce15f70448d3aaa",
        "verified": false
      }
    ],
    "persisting_count": 6,
    "added_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 1
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 1,
      "low": 1
    }
  },
  "trackers": {
    "added": [],
    "removed": []
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}