Articles

Image of lock over code DevSecOps: Incorporate Security into DevOps to Reduce Software Risk

DevSecOps is a growing movement to incorporate security into DevOps practices in order to ensure flaws and weaknesses are exposed early on through monitoring, assessment, and analysis, so remediation can be implemented far earlier than traditional efforts. By failing fast with security testing, organizations reduce risk of a security incident and decrease the cost of rework.

Alan Crouch's picture Alan Crouch
Better Software West 2018, Agile Dev West 2018, DevOps West 2018 Lightning Strikes the Keynotes
Slideshow

Throughout the years, Lightning Talks have been a popular part of the STAR testing conferences. Now, they’ve come to the combined Agile Dev, Better Software, and DevOps conferences too. If you’re not familiar with the concept, Lightning Talks consist of a series of five-minute talks by different speakers within one presentation period. Lightning Talks are the opportunity for speakers to deliver their single biggest bang-for-the-buck idea in a rapid-fire presentation. Some of the best-known experts will step up to the podium and give you their best shot of lightning. Get multiple keynote presentations for the price of one—and have some fun at the same time.

Bob Galen
STAREAST 2018 API Testing: How to Write Tests, Integrate into CI, and Track What You're Testing
Slideshow

Some developers and testers think that APIs, whether internally developed or not, should just work. Unfortunately, without a significant amount of focus on testing API services, one little flaw can spell disaster for your application—especially security vulnerabilities where hackers will target your application. Elise Carmichael discusses the risks of not fully testing APIs, how to be sure that all services are tested fully, and the types of negative testing you need to do on APIs. She shows you a method to organize your tests using Postman, a tool for REST web services testing. During this session, Elise and the participants will write some Postman API tests with variables and then execute the tests with Newman, a command line application for running Postman tests that you can include in continuous integration scripts.

Elise Carmichael
STAREAST 2018 The Appium Framework: Create and Implement Your Mobile Testing Strategy
Slideshow

The trend in mobile apps today is who can deliver the best and the most new apps as quickly as possible to keep up with the competition. With this, the need for more and better testing seems to grow exponentially. Open source Appium is a unique mobile app testing framework that allows you to write a single test which executes for native or hybrid apps on different operating systems running simulators/emulators and real devices in parallel. Harry Roberts describes how to create and implement a successful mobile testing strategy using Appium across Android and iOS devices. After discussing the basics of Appium and demonstrating it live, Harry outlines how you can determine when to run tests on emulators/simulators vs. real devices and which tools are most efficient and cost-effective.

Harry Roberts
STAREAST 2018 Make the Shift to Quality Engineering
Slideshow

In the shift toward “continuous everything” in software development and delivery, we know that testing and testers must foster and support innovation within technology. Many of us just don’t know how to gauge that shift or, more importantly, know what needs to happen within our role to make it happen. Melissa Tondi explores the future of testing, what skills we should have/develop to ensure we are prepared for that future, and the traits of a quality engineer (QE)—where she believes many tester roles are shifting. Melissa walks you through what an innovation-oriented QE organization looks like, how she has shifted several traditional QA/testing teams to become quality engineers with balance between traditional specialist roles and more generalists—all while keeping efficiency and innovation at the forefront.

Melissa Tondi
STAREAST 2018 What's an API and How Do I Test It?
Slideshow

API-based applications have become ubiquitous in the past few years. Yet many of us still really don't know what an API is from the inside out. Moreover, many of us don't know much about how to comprehensively test them! Join Paul Merrill to learn what everyone is doing and talking about related to APIs: microservices, REST, endpoints, requests, request methods, and responses. Paul demonstrates four free tools you can use to directly interact with a simple API: curl, the browser, Postman, and Java (with Rest Assured). Learn techniques for testing APIs at the service level and how to test APIs faster with greater coverage and quicker test automation. Walk away with an understanding of what JSON is, how APIs use JSON, and how to go about verifying that it is correct. With new knowledge and skills, you’ll do a better testing job and give more valuable feedback to the API designers and developers.

Paul Merrill
STAREAST 2018 AR and VR for Mobile Apps: Are You Ready to Test?
Slideshow

Augmented reality (AR) and virtual reality (VR) mobile apps are going to dominate the technical landscape for the next few years. Compared to current mobile apps, testing this new AR and VR technology will require more preparation, more effort, and new tools. BJ Aberle breaks down the methods and tools he uses to test AR and VR applications. Explore test environment requirements and discover the types of test data you’ll need to prepare for AR and VR testing. Learn about Google’s Tango AR platform and BJ’s experiences testing AR apps, including the Tango-based Cydalion app for the visually impaired. BJ shares the pitfalls he discovered—so you can avoid these when starting your AR or VR testing endeavors. Take back a set of new techniques you may be able to apply to streamline your virtual and augmented reality testing efforts.

BJ Aberle
STAREAST 2018 Release Automation: Yes, Testers Should Care
Slideshow

Agile DevOps focuses on moving changes through the pipeline as quickly as possible, which means that more operational tasks—like software deployment—will occur earlier. As a result, testing teams will begin assuming more responsibility in managing those deployments in order to perfect reputability. Tracy Ragan provides an overview of release automation as it relates to testing and explains how automation is key to achieving faster and leaner testing cycles. She discusses why deploying new code across diverse environments can be really tricky and slow, and how properly implemented release automation will streamline code deployments across the lifecycle. Release automation may sound like a topic important to production control teams, but as processes are shifted left, testing teams will take on more responsibility in continuous deployment and associated infrastructure components.

Tracy Ragan
STAREAST 2018 Five Things We’ve Learned from 100,000 Bug Fixes
Slideshow

[video:https://youtu.be/GRXNPt2IAyY width:300 height:200 align:right]

Kristel Kruustük
STAREAST 2018 Integration and Functional Testing Using Dockerized Dependencies
Slideshow

To emulate production-like conditions that cannot be tested on the unit level, many integration and functional tests need a realistic environment. However, performing these tests in a production-like environment is fraught with problems—test data management issues, tests that are difficult to execute repeatedly, and network traffic that causes long-running test execution times. Instead of having to deal with these problems and others, Irene Dhong employs Docker to simulate dependencies. Learn how you can take advantage of Dockerized dependencies for quick test writing, reusability of common development code, and the ability to test early and often on a very low functional level. Irene describes how her development team is using Docker to implement more effective TDD and unit testing environments because Docker utilizes similar infrastructure both on the development and DevOps side. Join in to get Dockerized, too.

Irene Dhong

Pages

AgileConnection is a TechWell community.

Through conferences, training, consulting, and online resources, TechWell helps you develop and deliver great software every day.