They seem to have prioritized making the process simple for developers by removing overhead. Apparently you are don't have to write lots of reports about your results for them, they just check that the code you said you'd write is in fact written and runs.
https://op.europa.eu/en/publication-detail/-/publication/257...
there was also a fosdem talk about this, if you prefer AV to text, finding it i leave as an exercise to the interested parties...