Allow Package Scanner to scan larger files using the VirusTotal v3 API

flcdrg commented 1 year ago

Checklist

[X] I have verified this is the correct repository for opening this issue.
[X] I have verified no other issues exist related to my problem.
[X] I have verified this is not an issue for a specific package.
[X] I have verified this issue is not security related.

What You Are Seeing?

Packages with files larger than 200MB are not uploaded to VirusTotal and get the message "File is too big to scan - the limit is 200MB and this file is 255.74MB"

What is Expected?

Virus scanner should allow up to 650MB as per https://github.com/VirusTotal/vt-cli/issues/33

How Did You Get This To Happen?

Submitted package that referenced files that are larger than 200MB

┆Issue is synchronized with this Gitlab issue by Unito

pauby commented 1 year ago

Package Scanner does not use the VT v3 API at the moment which is why the files are limited to 200MB.

asheroto commented 4 months ago

I ran across this issue as well with Laravel Herd, as it is 229MB, just 29MB over the 200MB limit.

This limitation, however, only applies to the API. If you guys would take advantage of the official VirusTotal CLI, you can still upload files beyond 200 MB.

Command example:

vt scan file .\Herd-1.8.0-setup.exe

It spits out the checksum:

And then, of course you can find the file using the checksum through the API or web: https://www.virustotal.com/gui/file/b3fde098ff5e69685950495cd1c19a9b7507dea182ae2f87e1a3d7740f3cba5e

chocolatey / home