docs: add critical warning against using --no-verify

jimmyn · jimmyn · commit ebe46bdbf6cc · 2025-10-03T10:04:08.000+02:00
diff --git a/.husky/pre-commit b/.husky/pre-commit
@@ -1,7 +1,7 @@
 #!/usr/bin/env sh
 
 # Get list of staged PHP files
-STAGED_PHP_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep '\.php$')
+STAGED_PHP_FILES=$(git diff --cached --name-only --diff-filter=ACM | grep '\.php$' || true)
 
 if [ -n "$STAGED_PHP_FILES" ]; then
     echo "Running PHPStan on staged PHP files..."
diff --git a/CLAUDE.md b/CLAUDE.md
@@ -378,10 +378,10 @@ composer phpcbf -- src/Gateways/PaymentMethods/WCGatewayMoneiCC.php
 
 Automatically runs PHPStan on staged PHP files before each commit. This prevents committing code with type errors.
 
-**To bypass** (not recommended):
-```bash
-git commit --no-verify -m "message"
-```
+**CRITICAL**: NEVER use `--no-verify` to bypass pre-commit hooks!
+- Pre-commit hooks are there to catch errors before they reach the repository
+- If the hook fails, fix the actual errors instead of bypassing the check
+- Using `--no-verify` can introduce bugs and break the build
 
 ### Common PHPStan Errors & Fixes
 
