stop-on-failure has no effect

[hmingv]

When the hook is a sequence of commands, execution is not stopped when the command fails.

When the first command fails, it proceeds to the next command, and if the next command did not fail, completes the commit.

[template-provider]

any updates on this? does not work for me either :-(

[Wotts]

Alternatively you can explicitly exit the individual commands. Not a fix, but a workaround for now:

"pre-commit": [
    "composer phpcs $(git diff --staged --name-only --diff-filter=ACM) || exit 1",
    "gitleaks protect -v --staged || exit 1"
]