Agile + DevOps West 2023 - Software Tester

Although there are several controversies and misunderstandings surrounding AI and machine learning, one thing is apparent — people have quality concerns about the safety, reliability, and trustworthiness of these types of systems. Not only are ML-based systems shrouded in mystery due to their largely black-box nature, they also tend to be unpredictable since they can adapt and learn new things at runtime. Validating ML systems is challenging and requires a cross-section of knowledge, skills, and experience from areas such as mathematics, data science, software engineering, cyber-security,...

Effective prioritization is critical to wring the most out of agility. When you’re just delivering once, ordering matters little. However, when the option to release on a regular basis is available, what you do sooner rather than later can have huge impacts on value realization, risk mitigation, and more. However, prioritization is much easier in theory than in practice for most organizations. Arlen has been a practicing agilist for over two decades. Working with hundreds of clients and teaching thousands of students how to effectively prioritize is one of the most frequently raised topics...

With every commit, the threat landscape increases. One single vulnerability is all a hacker needs. Vulnerabilities have multiple sources, and you must have a plan for securing each potential risk vector and identify vulnerabilities early. In this session, we will describe defensive coding techniques you can use as a daily practice and how you can build a security champion program. We will practically cover ways of identifying security vulnerabilities in your IDE using CodeQL as a Static Code Analysis tool. This is an important step in the pre-commit stage to identify security...

Microservices, CI/CD, DevOps, GitOps, cluster networking, etc.—more and more teams are building software fundamentally differently than they did even a few years ago. However, testing approaches and tooling have not caught up yet. At least not until now. What if you could apply the same type of GitOps and DevOps methodologies to your testing activities? Tests could be deployed and stored in a Kubernetes cluster, they could be decoupled from your CI/CD, orchestrated in the cluster in the same way you do with your applications and not in your CI/CD, publish results aggregated in a common...