Description of problem:

In the analysis wizard, under Scope configuration there is an option to manually add a list of packages to be analyzed as well as the ability to support the exclusion of packages. When these values are used, the analyzer isn't respecting it.

Version-Release number of selected component (if applicable):

Upstream (7.0)

How reproducible:

100% 

Steps to Reproduce:
1. Create application to be analyzed
2. Under configuration->scope, add a list of packages to analyze and add some to exclude
3.

Actual results:

 Incidents for excluded packages are still shown in the report. Basically no filtering is being done.

Expected results:

Incidents for excluded packages shouldn't be in the report, and any included packages should still exist.

Additional info: