Overview
Conformance and hardening for deployable TYPO3 v14 site/project repos (type:project + Docker/Compose): layout, Compose topology, Concourse CI, supply-chain gating (Trivy/SBOM/cosign), secret-free config, Valkey/ofelia runtime. Site/project counterpart to typo3-conformance.
Detailed guide coming soon. We haven't written a full guide for this skill yet.
Related
Skill security-audit
Security audit patterns for PHP applications following OWASP guidelines. Covers XXE, SQL injection, XSS, CSRF detection, CVSS v3.1 scoring, and secure coding practices. By Netresearch.
Skill github-project
GitHub repository setup and platform-specific features. Branch protection, CODEOWNERS, Issues/Discussions/Projects, PR review workflows with conversation resolution, Dependabot/Renovate auto-merge, and GitHub Releases. Platform-only — CI/CD and security live in sibling skills. By Netresearch.
Skill enterprise-readiness
Assess and enhance software projects for enterprise-grade security, quality, and automation. Includes supply chain security (SLSA, signing, SBOMs), quality gates, and platform-specific hardening with dynamic scoring.
Skill github-release
Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrates version bumps, signed tags, and CI-driven releases across ecosystems.
Skill orocommerce
OroCommerce development guidance covering entities, datagrids, REST API, workflows, frontend, security, integration, and bundle scaffolding. By Netresearch.
Skill security-guidance
Security reminder hook that warns about potential security issues when editing files, including command injection, XSS, and unsafe code patterns