Skip to content

netresearch/typo3-site-conformance

v0.5.0(MIT AND CC-BY-SA-4.0)

Source-of-truth conformance ruleset + self-contained checker for deployable TYPO3 v14 site/project repos (type:project + Docker/Compose): layout, containers, Concourse CI, supply-chain, secrets, Valkey/ofelia. The site/project counterpart to typo3-conformance.

GitHubOpen Website

TYPO3 Site / Project Conformance Skill

Conformance and hardening for deployable TYPO3 v14 site/project repositories — the site/project counterpart to the extension-scoped typo3-conformance.

What this skill solves

TYPO3 work splits into two worlds: reusable extensions (packages, ext_emconf.php, Classes/, TER) and deployable sites (type: project, Docker/Compose, CI/CD, secrets, runtime). The existing conformance skill covers extensions; this one covers the site/project half — repository layout, container topology, Concourse pipeline, supply-chain gating, secret handling, and the Valkey/ofelia runtime — against the Netresearch gold standard.

The ruleset

The rule catalogue and a self-contained checker ship inside this skill, so running it needs nothing else:

typo3-14-gold is a runnable reference implementation that scores 100 % against this ruleset; typo3-project-standard is the human-readable companion. Both are Netresearch-internal and optional.

Use when

  • A repository has composer.json "type": "project" and a root Compose file (compose.yaml/docker-compose.yml).
  • You are reviewing or hardening container/Compose topology, a Concourse pipeline, supply-chain gating, or TYPO3 site config (config/system, config/sites).
  • You are forking the gold skeleton to start a new customer site, or migrating a legacy support/typo3-NN/app-style repo.

For extension repos use typo3-conformance instead.

Expected outputs

  • A pass/fail conformance verdict per rule family (STRUCT, CONTAINER, CI, DEPLOY, DEP, SEC, DOC) with file:line evidence.
  • A prioritized remediation list (ERROR blocks, WARN should-fix, INFO advisory).
  • For migrations: the concrete seven-move transformation plan (references/migration-from-reference.md).

Context requirements

  • Read access to the target repository tree (composer.json, Dockerfile, compose*.yaml, ci/, config/system, config/sites, .gitlab-ci.yml, AGENTS.md).
  • python3 + pyyaml to run the bundled checker. Nothing else.

Example prompts

  • "Is this TYPO3 site repo gold-conformant? Score it."
  • "Review our compose.yaml and Concourse pipeline against the gold standard."
  • "Migrate this support/typo3-12/app repo to the gold layout."
  • "Why is check.py failing on STRUCT-001 / SC-007?"

Related skills

  • typo3-conformance — extension quality/TER readiness (the sibling).
  • enterprise-readiness — generic supply-chain/OpenSSF hardening.
  • docker-development, concourse-ci — the underlying container/CI mechanics.

Compatibility

TYPO3 v14.3 LTS (current gold target), PHP 8.4 baseline. Reference implementation (Netresearch-internal): typo3-14-gold.

Installation

Add the Netresearch marketplace and install the plugin:

/plugin marketplace add netresearch/claude-code-marketplace
/plugin install typo3-site-conformance

Contributing

Issues and PRs welcome. To change a rule, edit the catalogue in skills/typo3-site-conformance/checker/gen_rules.py and regenerate rules.json. Run bash validate-skill.sh . (from skill-repo-skill) before opening a PR.

License

Code MIT, content CC-BY-SA-4.0 — see LICENSE-MIT and LICENSE-CC-BY-SA-4.0. © Netresearch DTT GmbH.