When a user specifies an empty string for SAST_ANALYZER_IMAGE_TAG or
DS_ANALYZER_IMAGE_TAG we end up defaulting to `latest`, when we should
only use `latest` if explicitly passed. Otherwise we should fallback to
our latest major version. Since common module versioning matches major
releases, we can be explicit here.