This document contains the summary of a presentation on shift-left testing. It introduces the speaker and defines shift-left testing as testing early in the software development life cycle (SDLC) to detect defects earlier. Potential issues with not doing shift-left testing include slowly receiving user feedback, testing becoming a bottleneck, delayed releases, and costly bugs. The benefits outlined include preventing issues earlier, detecting defects sooner, enhanced test coverage, streamlined workflows, and reduced costs. Key promoters are improving testability, cross-team collaboration, continuous integration/delivery, and growth mindset. Best practices discussed include proper planning, understanding requirements, specifying quality standards, and embracing automation. The takeaways encourage collaborating with developers and getting involved in
Free and Open Source web service testing application.
Released in Sept. 2005, Developed by eviware software.
Built entirely on java platform & uses swing for UI.
Soap UI Pro is the commercial enterprise version.
Latest version 4.5.1
Java web development 10 (draft)
자바 웹 개발 시작하기
(10주차 : ㅌㅗㅇ ㅎㅏ ㄹㅏ)
2012. 1. 18
벌써 2년도 넘은 자료지만
그래도 필요하신분이 있을지 몰라서...
(지금보니 2년사이 많은것을 배운것 같네요 ㅎㅎ)
사실 마지막 주차는 발표자료 마무리가 부족하다.
그 당시 뭔가 급한일이 있어서;;; (일꺼라 추측)
지금와서 문서에 손을 대기는 좀 그래서 부족하지만 수정없이 배포한다.
Most of the people think that quality in software development is limited to manual testing on the latest stage before releasing a product. That might be true 20 years ago in the industrial era. But current world is much more dynamic than before. Time to market became the most crucial metric nowadays. Releasing code to production need to be done faster and faster. How to maintain quality on a sufficient level in this fast paced environment? How to find a time to work on quality improvements? Those are two main questions I want to answer during this talk. Do not expect a silver bullet or even receipt to success. But definitely expect a lot of information about continuous delivery/deployment/improvements with a case studies and lessons we learned at Spotify.
Spotify Engineering Culture:
https://labs.spotify.com/2014/03/27/spotify-engineering-culture-part-1/
https://labs.spotify.com/2014/09/20/spotify-engineering-culture-part-2/
Scaling Agile @ Spotify
http://blog.crisp.se/2012/11/14/henrikkniberg/scaling-agile-at-spotify
Scaled Agile @ Spotify
http://vimeo.com/111131934
Secure Software Development Lifecycle - Devoxx MA 2018Imola Informatica
Slides from our talk @Devoxx MA 2018.
We discuss Secure Software Development Lifecycle practices, recommendations, and tools, and we show practical examples of bad progamming habits that can be mitigated.
Android Task Hijacking — уязвимость Android, которая позволяет подменить любое приложение, используя только стандартные механизмы и не требуя специальных разрешений. Такой подход не требует наличия root-прав на устройстве и Google спокойно пропускает такие приложения в Store. Из-за того что уязвимость находится на уровне системы, подмене подвержены все приложения на устройстве, в том числе системные. Докладчик расскажет о технических подробностях, покажет, как работает эта уязвимость, и поделится возможными решениями.
Van Wilson
Senior Consultant with Cardinal Solutions
Find more by Van Wilson: https://speakerdeck.com/vjwilson
All Things Open
October 26-27, 2016
Raleigh, North Carolina
Conduct a few internal pen tests and you’re bound to come across Jenkins, the world’s most popular build automation server. When you encounter it, what do you do? Go beyond a 5-minute Google search and checking for open script consoles. This talk dives into various ways to exploit Jenkins and how to move laterally into sensitive systems.
Free and Open Source web service testing application.
Released in Sept. 2005, Developed by eviware software.
Built entirely on java platform & uses swing for UI.
Soap UI Pro is the commercial enterprise version.
Latest version 4.5.1
Java web development 10 (draft)
자바 웹 개발 시작하기
(10주차 : ㅌㅗㅇ ㅎㅏ ㄹㅏ)
2012. 1. 18
벌써 2년도 넘은 자료지만
그래도 필요하신분이 있을지 몰라서...
(지금보니 2년사이 많은것을 배운것 같네요 ㅎㅎ)
사실 마지막 주차는 발표자료 마무리가 부족하다.
그 당시 뭔가 급한일이 있어서;;; (일꺼라 추측)
지금와서 문서에 손을 대기는 좀 그래서 부족하지만 수정없이 배포한다.
Most of the people think that quality in software development is limited to manual testing on the latest stage before releasing a product. That might be true 20 years ago in the industrial era. But current world is much more dynamic than before. Time to market became the most crucial metric nowadays. Releasing code to production need to be done faster and faster. How to maintain quality on a sufficient level in this fast paced environment? How to find a time to work on quality improvements? Those are two main questions I want to answer during this talk. Do not expect a silver bullet or even receipt to success. But definitely expect a lot of information about continuous delivery/deployment/improvements with a case studies and lessons we learned at Spotify.
Spotify Engineering Culture:
https://labs.spotify.com/2014/03/27/spotify-engineering-culture-part-1/
https://labs.spotify.com/2014/09/20/spotify-engineering-culture-part-2/
Scaling Agile @ Spotify
http://blog.crisp.se/2012/11/14/henrikkniberg/scaling-agile-at-spotify
Scaled Agile @ Spotify
http://vimeo.com/111131934
Secure Software Development Lifecycle - Devoxx MA 2018Imola Informatica
Slides from our talk @Devoxx MA 2018.
We discuss Secure Software Development Lifecycle practices, recommendations, and tools, and we show practical examples of bad progamming habits that can be mitigated.
Android Task Hijacking — уязвимость Android, которая позволяет подменить любое приложение, используя только стандартные механизмы и не требуя специальных разрешений. Такой подход не требует наличия root-прав на устройстве и Google спокойно пропускает такие приложения в Store. Из-за того что уязвимость находится на уровне системы, подмене подвержены все приложения на устройстве, в том числе системные. Докладчик расскажет о технических подробностях, покажет, как работает эта уязвимость, и поделится возможными решениями.
Van Wilson
Senior Consultant with Cardinal Solutions
Find more by Van Wilson: https://speakerdeck.com/vjwilson
All Things Open
October 26-27, 2016
Raleigh, North Carolina
Conduct a few internal pen tests and you’re bound to come across Jenkins, the world’s most popular build automation server. When you encounter it, what do you do? Go beyond a 5-minute Google search and checking for open script consoles. This talk dives into various ways to exploit Jenkins and how to move laterally into sensitive systems.
A lean automation blueprint for testing in continuous deliverySauce Labs
Testing in Continuous Delivery changes test automation. It demands more automation but also requires immediate feedback. Many test teams today suffer from two extremes. Too little or no automation to organizations with hundreds of thousands of tests constantly running all kinds of VMs takes multiple days to execute. Any hope of Continuous Delivery or Pipeline Automation makes these states unsustainable.
When Web Performance Optimization was emerging as a new field of engineering we had a handful of rules to follow. Gzip here, minify there, do some caching. This was 15 years ago.
This year’s Smashing Magazine performance checklist has 62 items with hundreds of links for further research.
Have we learned so much or has the Web become so complicated?
In this talk I will try to make sense of today’s most pressing Web Performance issues with easily digestible lessons about metrics, budgets, JavaScript frameworks, functional programming, browsers and plain old HTML.
Go - Where it's going and why you should pay attention.Aaron Schlesinger
I originally did this talk at a software/tech summit on 3/31/2015. The slides are also in Go present format at https://github.com/arschles/go-talks/tree/master/huawei-3-31-2015
What to Do—Develop Your Own Automation or Use Crowdsourced Testing?TechWell
Modern software products tend to have a rich UI that supports many user workflows, all of which need to be covered in testing. Agile organizations quickly discover that manual end-to-end testing neither supports their velocity nor provides respectable regression coverage. A common progression is to move from fully manual testing to record/replay, then to Selenium IDE style tests, then to automation based on Selenium WebDriver, perhaps with a BDD overlay. Daria Mehra has practiced this approach and shares her experience. She compares the Selenium style of automation to an alternative—crowdsourced test execution— which provides all the benefits of test automation, including continuous integration. This approach allows non-coders to express test cases in natural language, avoids the dependency on UI implementation, adds a “human eye” advantage, and provides the ability to massively parallelize tests for fast execution. Learn the pros and cons of end-to-end, UI-based test automation via Selenium compared to crowdsourcing. Find out how you can assess the suitability of these testing approaches for your needs.
Presented in BSPIN Conference (http://bspin.org/conference2014/) on "Succeeding in SMAC World". Had great interactions and glad to see great interest on Agile Testing concepts with Participants.
How to Run A/B Tests Successfully by Vice Media Product ManagerProduct School
This was an informal chat about what it's like running A/B Tests for a media company. George covered the different ways A/B Tests can be implemented within an organization and also touched on some of the misconceptions of A/B Testing.
Welcome to TestMetry, your ultimate destination for all things related to software testing, DevOps, and Robotic Process Automation (RPA). In today's rapidly evolving technological landscape, organizations are constantly striving to deliver high-quality software products at an accelerated pace. TestMetry is here to guide you through the intricacies of these essential disciplines, providing valuable insights, best practices, and industry trends to help you stay ahead in the game.
You can read articles at : https://testmetry.com/testng-framework-a-comprehensive-guide-for-effective-testing/
You want to improve your software skills. That’s a given. You may be a mentor or a manager who needs to improve the knowledge sharing among your software developers across different projects. Code Reviews can do just that while improving code quality in your projects. Code Review not only builds developer team spirit but also offers new ways to improve a software solution. You’ll walk away from this session with in-depth understanding of Code Review to strengthen your team.
Essentials of Automations: The Art of Triggers and Actions in FMESafe Software
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
Utilocate offers a comprehensive solution for locate ticket management by automating and streamlining the entire process. By integrating with Geospatial Information Systems (GIS), it provides accurate mapping and visualization of utility locations, enhancing decision-making and reducing the risk of errors. The system's advanced data analytics tools help identify trends, predict potential issues, and optimize resource allocation, making the locate ticket management process smarter and more efficient. Additionally, automated ticket management ensures consistency and reduces human error, while real-time notifications keep all relevant personnel informed and ready to respond promptly.
The system's ability to streamline workflows and automate ticket routing significantly reduces the time taken to process each ticket, making the process faster and more efficient. Mobile access allows field technicians to update ticket information on the go, ensuring that the latest information is always available and accelerating the locate process. Overall, Utilocate not only enhances the efficiency and accuracy of locate ticket management but also improves safety by minimizing the risk of utility damage through precise and timely locates.
Transform Your Communication with Cloud-Based IVR SolutionsTheSMSPoint
Discover the power of Cloud-Based IVR Solutions to streamline communication processes. Embrace scalability and cost-efficiency while enhancing customer experiences with features like automated call routing and voice recognition. Accessible from anywhere, these solutions integrate seamlessly with existing systems, providing real-time analytics for continuous improvement. Revolutionize your communication strategy today with Cloud-Based IVR Solutions. Learn more at: https://thesmspoint.com/channel/cloud-telephony
Why Mobile App Regression Testing is Critical for Sustained Success_ A Detail...kalichargn70th171
A dynamic process unfolds in the intricate realm of software development, dedicated to crafting and sustaining products that effortlessly address user needs. Amidst vital stages like market analysis and requirement assessments, the heart of software development lies in the meticulous creation and upkeep of source code. Code alterations are inherent, challenging code quality, particularly under stringent deadlines.
A Study of Variable-Role-based Feature Enrichment in Neural Models of CodeAftab Hussain
Understanding variable roles in code has been found to be helpful by students
in learning programming -- could variable roles help deep neural models in
performing coding tasks? We do an exploratory study.
- These are slides of the talk given at InteNSE'23: The 1st International Workshop on Interpretability and Robustness in Neural Software Engineering, co-located with the 45th International Conference on Software Engineering, ICSE 2023, Melbourne Australia
Do you want Software for your Business? Visit Deuglo
Deuglo has top Software Developers in India. They are experts in software development and help design and create custom Software solutions.
Deuglo follows seven steps methods for delivering their services to their customers. They called it the Software development life cycle process (SDLC).
Requirement — Collecting the Requirements is the first Phase in the SSLC process.
Feasibility Study — after completing the requirement process they move to the design phase.
Design — in this phase, they start designing the software.
Coding — when designing is completed, the developers start coding for the software.
Testing — in this phase when the coding of the software is done the testing team will start testing.
Installation — after completion of testing, the application opens to the live server and launches!
Maintenance — after completing the software development, customers start using the software.
Artificia Intellicence and XPath Extension FunctionsOctavian Nadolu
The purpose of this presentation is to provide an overview of how you can use AI from XSLT, XQuery, Schematron, or XML Refactoring operations, the potential benefits of using AI, and some of the challenges we face.
Enterprise Resource Planning System includes various modules that reduce any business's workload. Additionally, it organizes the workflows, which drives towards enhancing productivity. Here are a detailed explanation of the ERP modules. Going through the points will help you understand how the software is changing the work dynamics.
To know more details here: https://blogs.nyggs.com/nyggs/enterprise-resource-planning-erp-system-modules/
Launch Your Streaming Platforms in MinutesRoshan Dwivedi
The claim of launching a streaming platform in minutes might be a bit of an exaggeration, but there are services that can significantly streamline the process. Here's a breakdown:
Pros of Speedy Streaming Platform Launch Services:
No coding required: These services often use drag-and-drop interfaces or pre-built templates, eliminating the need for programming knowledge.
Faster setup: Compared to building from scratch, these platforms can get you up and running much quicker.
All-in-one solutions: Many services offer features like content management systems (CMS), video players, and monetization tools, reducing the need for multiple integrations.
Things to Consider:
Limited customization: These platforms may offer less flexibility in design and functionality compared to custom-built solutions.
Scalability: As your audience grows, you might need to upgrade to a more robust platform or encounter limitations with the "quick launch" option.
Features: Carefully evaluate which features are included and if they meet your specific needs (e.g., live streaming, subscription options).
Examples of Services for Launching Streaming Platforms:
Muvi [muvi com]
Uscreen [usencreen tv]
Alternatives to Consider:
Existing Streaming platforms: Platforms like YouTube or Twitch might be suitable for basic streaming needs, though monetization options might be limited.
Custom Development: While more time-consuming, custom development offers the most control and flexibility for your platform.
Overall, launching a streaming platform in minutes might not be entirely realistic, but these services can significantly speed up the process compared to building from scratch. Carefully consider your needs and budget when choosing the best option for you.
Need for Speed: Removing speed bumps from your Symfony projects ⚡️Łukasz Chruściel
No one wants their application to drag like a car stuck in the slow lane! Yet it’s all too common to encounter bumpy, pothole-filled solutions that slow the speed of any application. Symfony apps are not an exception.
In this talk, I will take you for a spin around the performance racetrack. We’ll explore common pitfalls - those hidden potholes on your application that can cause unexpected slowdowns. Learn how to spot these performance bumps early, and more importantly, how to navigate around them to keep your application running at top speed.
We will focus in particular on tuning your engine at the application level, making the right adjustments to ensure that your system responds like a well-oiled, high-performance race car.
Atelier - Innover avec l’IA Générative et les graphes de connaissancesNeo4j
Atelier - Innover avec l’IA Générative et les graphes de connaissances
Allez au-delà du battage médiatique autour de l’IA et découvrez des techniques pratiques pour utiliser l’IA de manière responsable à travers les données de votre organisation. Explorez comment utiliser les graphes de connaissances pour augmenter la précision, la transparence et la capacité d’explication dans les systèmes d’IA générative. Vous partirez avec une expérience pratique combinant les relations entre les données et les LLM pour apporter du contexte spécifique à votre domaine et améliorer votre raisonnement.
Amenez votre ordinateur portable et nous vous guiderons sur la mise en place de votre propre pile d’IA générative, en vous fournissant des exemples pratiques et codés pour démarrer en quelques minutes.
Software Engineering, Software Consulting, Tech Lead, Spring Boot, Spring Cloud, Spring Core, Spring JDBC, Spring Transaction, Spring MVC, OpenShift Cloud Platform, Kafka, REST, SOAP, LLD & HLD.
Hand Rolled Applicative User ValidationCode KataPhilip Schwarz
Could you use a simple piece of Scala validation code (granted, a very simplistic one too!) that you can rewrite, now and again, to refresh your basic understanding of Applicative operators <*>, <*, *>?
The goal is not to write perfect code showcasing validation, but rather, to provide a small, rough-and ready exercise to reinforce your muscle-memory.
Despite its grandiose-sounding title, this deck consists of just three slides showing the Scala 3 code to be rewritten whenever the details of the operators begin to fade away.
The code is my rough and ready translation of a Haskell user-validation program found in a book called Finding Success (and Failure) in Haskell - Fall in love with applicative functors.
2. Who Am I?
• I am 哲西
• A Father, who lives in Taipei.
• A geek who loves testing.
• An explorer.
• Twitter: https://twitter.com/jersey_su
• LinkedIn: https://www.linkedin.com/in/jerseysu/
• Medium: https://medium.com/@loverjersey
14. Bug king game, the highest scores is the
winner.
• Meaningless pull request title - 0.5 point
• No pull-request description - 1 point
• The commit message does not follow the conventional commits - 1 point
• N files changes without any unit test / functional test - 1 point
• Merge without anyone reviewed - 3 point
• Begging you to approval the pull-request without any context - 10 point
19. Why the shift-left testing?
https://www.coe.int/fr/web/internal-oversight/prevention-and-investigation-activ
Prevention the issue earlier
20. Why the shift-left testing?
http://shorturl.at/jvwRX
Testing to detect the defect earlier
21. The benefit of the shift-left testing
https://www.techarcis.com/shift-left-testing-explained-by-sunil-sehgal-of-techarc
22. The benefit of the shift-left testing
https://www.scrum.org/resources/blog/whats-good-code-coverage-h
Enhanced the test coverage
23. The benefit of the shift-left testing
https://trackvia.com/blog/workflow/6-steps-streamline-business-workf
Streamline the working flow
24. The benefit of the shift-left testing
https://knowledge.ulprospector.com/2909/pcc-5-ways-to-reduce-formula-cost-keep-consumers-h
Reduced the development / testing cost
25. The benefit of the shift-left testing
https://laravel-news.com/tips-to-speed-up-phpunit-tests
Speed up the release
26. The benefit of the shift-left testing
https://hackmd.io/@sysprog/software-failure
A real world issue
27. Key promoter to shift-left testing
https://newsroom.unsw.edu.au/news/business-law/3-problems-fines-not-reporting-positive-covi
Improve the code / environment testability
28. Key promoter to shift-left testing
https://www.glasscubes.com/improve-cross-team-collaborati
Crossteam collaboration
29. Key promoter to shift-left testing
https://www.atulhost.com/what-is-ci-cd
Do the CI and CD
30. Key promoter to shift-left testing
https://breezingminds.com/why-a-growth-mindset-is-essential-for-your-car
Mindset
31. Best practice of shift-left testing
https://www.quora.com/What-is-scrum-board
Proper planning
32. Best practice of shift-left testing
https://medium.com/doteveryone/knowledge-understanding-how-to-be-a-responsible-leader-in-a-digital-world-7f0bd
Totally understand the product requirement
34. Best practice of shift-left testing
https://commons.wikimedia.org/wiki/File:M%C4%83cin_Mountains_-_On_The_Way_Ba
Specify the quality guiding or standard
35. Best practice of shift-left testing
DevOps tools by phases and categories. Source: Bowman, 20
Embrase the tool and test automation
36. Take Away!
• Bugs are cheap when caught young .
• What’s the shift-left testing?
• Why the shift-left testing?
• The benefit of the shift-left testing.
• The best practice of the shift-left testing.
37. Take Away!
• Start to collaborate with your developer.
• Join the community, Test Corner, Ministry of testing.
• Find a mentor.
• It more blessed the to give than to receive.
• Growth mindset.
• Read, read and read. Try everything!
Again . Bug are cheap when caught young. 認同的. 在 Google Meeting talked 裡面打下這句話. 希望他能夠成為你今天的 take away.
來 recap 一下我們剛才聽到了什麼.
測試晚. 會有延伸問題.
To receive the user feedback slowly
Testing become the bottleneck
Delay release to production
Costly bugs fixing
Low quality product
這張圖應該大家都很熟. 但身為測試人員盡可能地去瞭解 deployment 如 Jenkins , Drone Travis CI 等工具. 它可以幫助你做整合測試. 也敬可能的了解 link check 工具如 aslant 等. 竟量讓你的 repo 整合GitHub action 或 web hook 等. 前期就可以幫助整個團隊找到軟體的缺陷.
最後就是觀念的改變. 品質是每個人的責任. 如果他只是單一團隊的責任. 那我們只會丟出爛東西給客戶.
畢竟 BUG IS NOT A PROBLEM, BUG IS A PROBLEM BETWEEN SOME PERSON. 很多時候 Bug 不是因為 code 寫不好造成. 有時候是需求的不明確, 甚至上線後還修改需求造成的災難.
近期有一個 incident 就影響了我整個美好的 Friday Morning.
test automation 不是銀彈但我們應該盡可能地將測試自動化, 這不僅能夠快速地知道 Code 的品質, 也能夠確保功能的正確性. 測試自動化是一個測試左移其中一個很重要的因子.
Enhanced the test coverage
Streamline the working flow
Reduced the development / testing cost
Speed up the release
Proper planning
Totally understand the product requirement
Specify the quality guiding or standard
Embrase the tool and test automation