Kevin Lu-MSFT's answer resolves this. We can use a configuration file to exclude files and directories from the scan.