The commit fails. Not because your code is broken, but because a security hook caught something dangerous before it could ship. That’s the point.
Pre-commit security hooks run inside your workflow, stopping secrets, unsafe configs, and exploitable code from entering the repo. They execute fast, inline, before the commit