Hello @kbh844082 (Community Member)​,

When performing a scan,  you can only select the top-level modules to scan on the Veracode Platform. Top-level modules are the binaries identified during prescan verification with entry points for external data, and all other binaries are the dependents of these top-level modules. A module is the file or files that Veracode scans, while the other files you upload are the supporting files. No top-level module is dependent on another top-level module.

After prescan verification is complete, information about the scannable modules within the application is available on the Select Modules page. If this is the first time you have scanned this application, a list of all the modules uploaded, and their status is displayed on the Advanced Mode module selection interface.

Veracode performs a default module selection based on the structure of the application identified during prescan verification. To change your selection, select the Entry Point checkbox on the Advanced Mode module selection interface. Veracode does not recommend that you choose additional modules beyond the default selection, as this can lead to over-analysis of the application and longer scan times.

By default, no modules are selected for the scan. Select all the binary or executable items that you want to scan by clicking the checkbox in the Scan column. You can select all modules by clicking on the checkbox in the table header. For most scans, there is no need to select dependencies, as any code paths used by the main executable are automatically analyzed as part of the primary module being analyzed. However, you may want to select the dependency if you wish to analyze all the code paths in the dependency.

If you have concerns or questions about a particular scan or file, I would recommend opening a support case for an engineer to take a look at it to address any concerns.

Jason

Veracode Support Engineer