通过Veracode的静态扫描避免扫描第三方库

I'm fixing flaws from my application's Veracode static scan result, and I'm realizing that it is analyzing third party libraries in addition to my source code. For instance, it's looking at the Apache Commons libraries and it is finding flaws inside it.I'm fixing flaws from my application's Veracode