Client-side git hooks vs server-side checks — what must run in CI?

Client-side git hooks vs server-side checks — what must run in CI?

• Hooks are optional locally — attackers or rushed devs can skip them with --no-verify.
• CI must enforce lint, tests, secret scan, and merge rules — hooks are convenience only.
• Pre-commit for fast feedback; pipeline for authoritative gates.