Limits
How much you can report in one request
A single report request is capped at 512 KB. Requests larger than 1 MB are rejected at the
gateway before they reach the product. An oversize request comes back as 413 with the error code
payload_too_large.
An entity carrying one problem is roughly 250-300 bytes, so a request holds a few thousand entities in practice — enough for a small catalogue, not for a large one.
There is no limit on how much you can report in total. A scan accepts as many requests as you want to send it: open a scan, report in batches, then complete it. Only the individual request is bounded.
If you report everything in a single call instead of opening a scan yourself, that call is one request and so carries the same 512 KB ceiling. Switch to a scan once a catalogue outgrows it.
What is not limited
- The number of entities in a dataset.
- The number of problems on an entity.
- How often you scan. Reporting the same dataset repeatedly is the expected pattern — it is how a problem gets resolved once it stops being reported.
TODO: dataset retention, and whether the number of datasets per project is bounded.