Pin Composition Analysis tools and analyzers to the minor version

As noted in the epic to which this issue belongs, we should pin Composition Analysis analyzers and tools to their minor versions. Details and discussion points can be found in the epic.

Tasks:

  • update the vendored templates https://gitlab.com/gitlab-org/gitlab-ee/blob/master/lib/gitlab/ci/templates/Security to use the new major.minor image tag instead of major
    • Dependency-Scanning.gitlab-ci.yml
    • License-Scanning.gitlab-ci.yml
  • update the release process documentation to add a step to update the vendored template when releasing a tool or an analyzer
  • update the CI config for SAST, DS, CS, and LM
    • build the major.minor docker image tag along with major.minor.patch and major ones.
    • stop releasing x-y-stable Docker tags for tag builds
Edited by Olivier Gonzalez