Runtime and Provided dependencies should be excluded from analysis

No need to scan Runtime and Provided dependencies, as they won't be bundled