fix: use PVTR_VERSION arg in plugins.json instead of hardcoded version

Signed-off-by: Joana Maia <jmaia@contractor.linuxfoundation.org>

Author: joanagmaia

scripts/services/docker/Dockerfile.security_best_practices_worker

@@ -12,6 +12,7 @@ FROM golang:1.26.3-alpine3.23 AS plugin
 RUN apk add --no-cache make git
 WORKDIR /plugin
 ARG PVTR_COMMIT=c7bd9538d64f7eaab94a05c9b5fd05458a387b1c
+ARG PVTR_VERSION=v0.23.2
 # To run the latest version of the plugin, we need to use the latest commit of the pvtr-github-repo-scanner repository.
 # Currently using v0.23.2: https://github.com/ossf/pvtr-github-repo-scanner/commit/c7bd9538d64f7eaab94a05c9b5fd05458a387b1c
 RUN git clone https://github.com/ossf/pvtr-github-repo-scanner.git && cd pvtr-github-repo-scanner && git checkout ${PVTR_COMMIT}
@@ -35,8 +36,9 @@ FROM node:20-bookworm-slim as runner
 RUN mkdir -p /.privateer/bin
 WORKDIR /.privateer/bin
 COPY --from=core /app/pvtr ./privateer
+ARG PVTR_VERSION=v0.23.2
 COPY --from=plugin /plugin/github-repo /root/.privateer/bin/github-repo
-RUN echo '{"plugins":[{"name":"github-repo","version":"v0.23.2","binaryPath":"github-repo"}]}' > /root/.privateer/bin/plugins.json
+RUN echo "{\"plugins\":[{\"name\":\"github-repo\",\"version\":\"${PVTR_VERSION}\",\"binaryPath\":\"github-repo\"}]}" > /root/.privateer/bin/plugins.json
 COPY ./services/apps/security_best_practices_worker/example-config.yml /.privateer/example-config.yml
 
 WORKDIR /usr/crowd/app