Currently, both failOnViolation and failOnError are set (https://github.com/googleapis/java-shared-config/blob/main/pom.xml#L649,L651).
The way I am reading checkstyle documentation, they are more either/or -- either fail before logging or log and then fail: https://maven.apache.org/plugins/maven-checkstyle-plugin/check-mojo.html.
Thanks @elefeint for pointing this out.