run brakeman as part of commit stage.