Update cve-scanning.yml

Author: dschwartz-ftadvisory

.github/workflows/cve-scanning.yml

@@ -41,7 +41,8 @@ jobs:
             --failOnCVSS 7
             --enableRetired
             --log ./odc.log
-            --exclude **/*-javadoc.jar
+            --exclude **/*-javadoc.jar 
+            --exclude **/*-sources.jar
             --out ./reports
       - name: list dependency log
         run: ls -l **