If no tag was specified, pull "latest" explicitly.

When no tag is given to Docker pull, it downloads all tags. This could be a
significantly large number of images and in the end we only ever run
:latest.