docker-image: ignore DL3007
Using latest is good enough for us, and in case of actual issues we can still pin to a specific release. This makes it easier to keep all images up-to-date rather then having to change the base image version on each repository.