Have a SAST stage for each merge request