Merge pull request rails#50647 from igor-alexandrov/stricter_brakeman

Made Brakeman CI config stricter

Author: rafaelfranca

railties/lib/rails/generators/rails/app/templates/bin/brakeman.tt

@@ -1,4 +1,6 @@
 require "rubygems"
 require "bundler/setup"
 
+ARGV.unshift("--ensure-latest")
+
 load Gem.bin_path("brakeman", "brakeman")

railties/lib/rails/generators/rails/app/templates/github/ci.yml.tt

@@ -21,7 +21,7 @@ jobs:
           bundler-cache: true
 
       - name: Scan for security vulnerabilities in Ruby dependencies
-        run: bin/brakeman
+        run: bin/brakeman --no-pager
 <% end -%>
 <%- if options[:javascript] == "importmap" -%>