Hi,

At this time the 5GB limit is a design constraint that is a result of optimizing our scanning to scale with typical customer application needs and scanning patterns. We’re focused on optimizing our platform to support the trend of smaller application sizes and ensuring fast scan performance for our customers. The recommendation we would make is to take steps to reduce your application submission:

• Remove any files that produced “red errors” and cannot be scanned by Veracode
• Remove any unnecessary file or content that Veracode does not scan
• Remove any duplicate files or dependencies

Our experience with applications that exceed 5GB size has demonstrated to us those applications could benefit from a more granular security assessment approach. Please ask your SPM about how to connect with a Security Architect or Application Security Consultant (ASC) to have a conversation about how you are scanning your application.