When run on merge requests, BAP should use the merge target as baseline instead of latest release
Background and Rationale behind this Work
In the sast-rules
project, BAP results are often duplicative because every commit is compared to a release. By comparing an MR to the target branch results, the changes detected will be based solely on the changes corresponding to the MR itself.