# drupal-file-module
Checks which Drupal modules are enabled or disabled by reading the
core.extension.yml file from the filesystem. Use this when you want to verify
module state from exported config without a running Drupal instance.
Check type: drupal-file-module
# Fields
| Field | Type | Required | Description |
|---|---|---|---|
name | string | yes | Label shown in output |
severity | string | no | low, normal, high, or critical (default: normal) |
path | string | yes | Directory containing core.extension.yml |
required | list | no | Module names that must be enabled |
disallowed | list | no | Module names that must not be enabled |
# Example
checks:
drupal-file-module:
- name: Required security modules
path: config/default
required:
- seckit
- shield
disallowed:
- devel
- webprofiler
Source: pkg/config/testdata/shipshape.yml
# Behaviour
Shipshape reads <path>/core.extension.yml and checks the module key. Any
module in required that is not listed is reported as a breach. Any module in
disallowed that is listed is reported as a breach.
# Remediation
This check does not support automatic remediation. Enable or disable modules using Drush or the Drupal UI, then re-export configuration.