Replace var image suffix with input

README.md

@@ -23,3 +23,4 @@ where `<VERSION>` is the latest released tag or `main`.
 | ----- | ------------- | ----------- |
 | `stage` | `test`      | The stage where you want the job to be added |
 | `image_prefix` | `$CI_TEMPLATE_REGISTRY_HOST/security-products` | Define where all Docker image are pulled from |
+| `image_suffix` | `""` | Used by `semgrep-sast` job only |

template.yml

@@ -4,6 +4,8 @@ spec:
       default: test
     image_prefix:
       default: "$CI_TEMPLATE_REGISTRY_HOST/security-products" 
+    image_suffix:
+      default: ""
     
 ---
 .sast-analyzer:
@@ -13,7 +15,6 @@ spec:
   # see https://gitlab.com/gitlab-org/gitlab/-/issues/218444
   variables:
     SEARCH_MAX_DEPTH: 4
-    SAST_IMAGE_SUFFIX: ""
     SAST_EXCLUDED_ANALYZERS: ""
     SAST_EXCLUDED_PATHS: "spec, test, tests, tmp"
     SCAN_KUBERNETES_MANIFESTS: "false"
@@ -182,7 +183,7 @@ semgrep-sast:
   variables:
     SEARCH_MAX_DEPTH: 20
     SAST_ANALYZER_IMAGE_TAG: 3
-    SAST_ANALYZER_IMAGE: "$[[ inputs.image_prefix ]]/semgrep:$SAST_ANALYZER_IMAGE_TAG$SAST_IMAGE_SUFFIX"
+    SAST_ANALYZER_IMAGE: "$[[ inputs.image_prefix ]]/semgrep:$SAST_ANALYZER_IMAGE_TAG$[[ inputs.image_suffix ]]"
   rules:
     - if: $SAST_DISABLED
       when: never