docker-image: ignore DL3007

Using latest is good enough for us, and in case of actual issues we can
still pin to a specific release. This makes it easier to keep all images
up-to-date rather then having to change the base image version on each
repository.