Use latest tag and main for the gandalf template

gitlab-scanners.yml

@@ -7,7 +7,7 @@ include:
   - template: Jobs/SAST.latest.gitlab-ci.yml
   - template: Jobs/Secret-Detection.latest.gitlab-ci.yml
   - template: Jobs/Dependency-Scanning.latest.gitlab-ci.yml
-  - remote: https://gitlab.com/gitlab-com/gl-security/security-operations/infrastructure-security-public/gandalf/-/raw/v2.4.0/template/kics-scanner.yml
+  - remote: https://gitlab.com/gitlab-com/gl-security/security-operations/infrastructure-security-public/gandalf/-/raw/main/template/kics-scanner.yml
 sast:
   stage: $[[ inputs.stage ]]
@@ -26,7 +26,7 @@ dependency_scanning:
 # Only running the gandalf when a repository is IAC and and have GITLAB_TOKEN set
 # https://gitlab.com/gitlab-com/gl-security/security-operations/infrastructure-security-public/gandalf/
 kics-iac-sast:
-  image: registry.gitlab.com/gitlab-com/gl-security/security-operations/infrastructure-security-public/gandalf@sha256:81ff49b41ac48694b559369ef938d5c03328e9c0d079ea5b443c5397ff5491a1
+  image: registry.gitlab.com/gitlab-com/gl-security/security-operations/infrastructure-security-public/gandalf:latest
   stage: $[[ inputs.stage ]]
   rules:
     - if: $CI_PIPELINE_SOURCE == 'merge_request_event' && $GITLAB_TOKEN && $IAC