Need to use latest to work with merge request pipelines.
latest
See https://docs.gitlab.com/ee/user/application_security/index.html#use-security-scanning-tools-with-merge-request-pipelines