if you could make static analysis fast enough, GitHub could it make it so that the git push itself is refused, so no one ever sees it.

Of course, an escape hatch (like adding some "I know what I am doing" tag to the commit) would be necessary but that's trivial to setup.