{
  "ok": true,
  "app_id": "com.tripp.companion",
  "comparable": false,
  "comparison_status": "limited_coverage",
  "regressed": true,
  "grade_delta": null,
  "score_delta": null,
  "from": {
    "scan_id": "882e5060-97d5-4824-9c85-21fc94d57c18",
    "version": "1.22.2",
    "analysis": {
      "status": "unknown"
    },
    "provenance": {},
    "grade": "A",
    "score": 95,
    "scanned_at": "2026-09-02T11:53:42.016Z"
  },
  "to": {
    "scan_id": "86ddb149-4fb1-4493-8835-523db7dfbc4e",
    "version": "1.22.3",
    "analysis": {
      "issues": [],
      "stages": {
        "pii": "complete",
        "sbom": "complete",
        "signing": "certificate_parsed",
        "strings": "complete",
        "manifest": "complete"
      },
      "status": "complete",
      "grading": {
        "policy": "static-coverage-v1",
        "blockers": [],
        "eligible": true
      },
      "timings_ms": {
        "total": 72835.528,
        "harvest": 45833.17500000004,
        "detectors": 22822.896000000135
      },
      "bytes_total": 817692785,
      "bytes_scanned": 817692785,
      "bytes_skipped": 0,
      "files_processed": 2299,
      "coverage_version": 2,
      "string_encodings": [
        "ascii",
        "utf16le"
      ],
      "signature_validation": "not_performed"
    },
    "provenance": {
      "mode": "static",
      "artifacts": [
        {
          "name": "base.apk",
          "sha256": "7df1dfb0768ab8fce9069e77558473a408b448537593c05c951a6d4e573f2f05"
        },
        {
          "name": "UnityDataAssetPack.apk",
          "sha256": "f3551c180c8192b81e98ab99a2b115232c2c657a19d549fed1df6c5017ff5a3d"
        },
        {
          "name": "config.arm64_v8a.apk",
          "sha256": "7eaec9ab0210b555928c5faad07350ece9c05bca947c055cc81da69a81625032"
        }
      ],
      "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e"
    },
    "grade": "F",
    "score": 0,
    "scanned_at": "2026-10-06T16:15:57.339Z"
  },
  "findings": {
    "added": [
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "e0aa98efb8b3a44467e6955f22c8d71bed75b839bb8b8a8b4350446827e7df68",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "61bbee9f7525a7a414f232240deec4d7248424229194c3dcc39b15b1ace2e514",
        "verified": false
      },
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "c324c55906beec5054f73a37e04b2e6568bae0b14d0ac5d449a38131a96fe0d0",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "9dd5572354171bf86d635c573788e0bb6697f069cf8e27e247a7f2c37c120c59",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "bc17bc94016d4d4e09ca7b02fa549122addf5439e0d27338212f43116a9633d6",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "6de9b911499f5c66526152ec0d29b44b307478992cdf45208904b8efb91145bd",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "8a6d5033ea03e1ea1d22dc2a0122d7f40142bb2e6b4ab3f1375c9adc150fdeb8",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "f5de1491a83b8faad9c5b8f7977e86474e5855207687dd50b26fddab97fb7e6e",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "ebfd01838df35a92ccb48a952408a57a0b7145398d76d3dd9daf102ec8d2d3fe",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "835a34107192e4472772ad7297433d4bce74861c9b41cef6655a97b20e592ef0",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "b42c0600dfec7e4f3b9d0b97d6296b6d565e5a1bcd5b6a1b14a348a9ea4b2067",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "bca7ccbf897962a637c563f44a570644aa1e49fe8c175d714d2267dddd2d8b13",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "28333f65636c1a07010be6411d6fdfd6bda7d1749a5c096229a6a9113cec242a",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "78e7f98ac4ff0d833944bb4a595406c2d03f44fb2c1045542c2df51ec5cc6988",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "9ad8cd67e5234335bd3ecef2a6eea2bf3da151db81ac82d55b9fc9d8f28eb87d",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "c7dfa8ac18f0c28b80ce4d3e0c3c522d42b27b3f6ccb0039cc6bfc19630ef067",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "f565cbc2b1ecd198783193ca850e56ad4eea6f14e6c79dd91c37f4642ccb20d4",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "8af9c0c53718740f1662f3b7774332512ebf83b0e566395c138218dc9e6a672d",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "c33daf7c6a975b2cb01640c2b2531e8201c9e2699d141a6988d58439d60bd8ee",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "9ad78fa9ab400a2d8edcf26d082f4457ba403fbc6e8e107819739bd543f897e1",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "dfefd99de6e81444f5e8b793d8f10d0b21c5a850d3e5a7f2b760bb58b772f285",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "d54e3b4863b44548ac8484698825f94c1ea25065f0a2f09034f10027834d1982",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "37609d1fdfce27e3e554522a1ae3f54d3b4af801cb6b7636f5232394f4134840",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "a5db07d43227eafb55f4c10c6ee13dc4e5774a8a0295c00b6058c493ad8406bb",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "10168b928539eb5fd7f1eaf96f00f30376b3c5f24d5a5ae6155201523d0f59d6",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "cfe0f18fda964031c34190e62f8164796a02583a421d1cafb758a83edaf33eb2",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "40aad2e4247d4dfe513bb18a4242139f8aea957056e56dbd1cd69784665abe1e",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "5abc3ee20a32833c86e07921e876ba51fbcead71bef30bb09886ac1ad7d1b07b",
        "verified": true
      },
      {
        "finding_type": 3,
        "severity": "critical",
        "title": "Google Cloud Storage reference — confirmed publicly readable",
        "fingerprint": "c232081d0350557ede784559149f43307a7cdec43c6abb15ad3db80fb6fbc033",
        "verified": true
      },
      {
        "finding_type": 37,
        "severity": "info",
        "title": "Application data is backup-enabled",
        "fingerprint": "68d134f0bcd98a9559d6dd5275f80a3928e4a6490ac4a0f1bd16f87683bd49f8",
        "verified": false
      }
    ],
    "removed": [
      {
        "finding_type": 53,
        "severity": "low",
        "title": "Firebase Storage bucket reference",
        "fingerprint": "a73ac6c8f5c26ac4355c6a925f5a1f0d36eeac12d245a6416d370ea993eb030f",
        "verified": false
      },
      {
        "finding_type": 20,
        "severity": "low",
        "title": "Google API key (client-shipped; restriction unverified)",
        "fingerprint": "e3a3dfa064d8dcfbdd2d8aefb84482fcb1714c0ed84f84445ccb8ba6f1212713",
        "verified": false
      },
      {
        "finding_type": 2,
        "severity": "low",
        "title": "Firebase Realtime Database reference",
        "fingerprint": "1a7f3fed4e8b664cc636ca73f94d27f31717fc47cbd0f77c95cff30895fb74be",
        "verified": false
      },
      {
        "finding_type": 3,
        "severity": "low",
        "title": "Google Cloud Storage reference",
        "fingerprint": "26eb637cfeef61011b21dc12a3c7bb4c480a9433b5474cf53a03c892e18fdfaf",
        "verified": false
      },
      {
        "finding_type": 37,
        "severity": "low",
        "title": "Application data is backup-enabled",
        "fingerprint": "d3416964a26a93aeec0126ea1bb43b17c4aba66f0c76c2dc8ebd02d06ec4ef49",
        "verified": false
      }
    ],
    "persisting_count": 0,
    "added_by_sev": {
      "critical": 25,
      "high": 0,
      "medium": 0,
      "low": 4
    },
    "removed_by_sev": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 5
    }
  },
  "trackers": {
    "added": [
      "Google Analytics for Firebase",
      "IAB TCF"
    ],
    "removed": [
      "Google AdServices"
    ]
  },
  "known_vulns": {
    "from": 0,
    "to": 0,
    "delta": 0,
    "from_recorded": true,
    "to_recorded": true
  }
}