+1 for adding latest. We're already scanning "latest legacy" (legacy tag), so I think it'd make sense to have it for Quarkus too.

One argument for NOT adding it would be that we already scan nightly tag. However, if there's a CVE in a dependency that we have already updated to a non-affected version in main, the scanner won't catch it as our nightly is not affected. But our latest would be affected as the dependecy is not updated there yet. Therefore IMHO we should scan latest as well.