DevOps & Quality Assurance

DDEV - centerpiece of your local development platform

mirom — Mon, 22 May 2023 21:07:52 +0000

DDEV - centerpiece of your local development platform

Room

HS1 (Ground level)

mirom Mon, 05/22/2023 - 23:07

Time Slot

Fri 11:45am to 12:15pm (7/21/23)

Session length

Short session - 25min, including Q&A

Audience

All Attendees

Session Category

DevOps & Quality Assurance

With the increasing number of technologies necessary to run your projects it’s important to make onboarding and switching of developers as efficient as possible. Docker is a huge help, but it also means an additional technology to master. That’s where DDEV comes for rescue.

DDEV is a Docker wrapper allowing you to run your services in containers without deep Docker knowledge. On top of that it provides you with an ecosystem of add-ons, hooks and scripts.

At Jobiqo we’re using DDEV to build our local development platform. In this session we will explain why we picked DDEV, we will showcase its features and how we’re leveraging it (not only) on localhost.

Speaker(s)

Miro Michalicka

DevOps Lead at Jobiqo

Speaker biography

Miro Michalicka is an experienced DevOps engineer based in Slovakia. For the past three years he has been working with Jobiqo with their DevOps team. In this position he extended his experiences of various local development platforms and helped to bootstrap Jobiqo's cloud hosting platform.

Session Keywords

DevOps

What we learned introducing PHPStan to a large scale project

simonbaese — Mon, 15 May 2023 07:41:09 +0000

What we learned introducing PHPStan to a large scale project

Room

HS4 (Ground level)

simonbaese Mon, 05/15/2023 - 09:41

Time Slot

Fri 5:10pm to 5:40pm (7/21/23)

Session length

Long session - 45min, including Q&A

Audience

All Attendees

Session Category

DevOps & Quality Assurance

Static code analysis using PHPStan is a powerful tool that enhances the stability of your codebase, ensures adherence to coding standards, and enforces best practices. In the past year, we integrated PHPStan into a large-scale Drupal project, and the session will provide a comprehensive report on our experience navigating a fast-moving codebase, a challenging architecture, and a demanding client. We will cover technical aspects, as well as the project management perspective, which entails effective collaboration and communication among developers.

Speaker(s)

Simon Bäse

Senior Backend Developer at Factorial GmbH

Speaker biography

Speaker

Senior Backend Developer at Factorial GmbH
Co-Founder & Web-Developer at the volunteering platform youvo.org
Research developer for numerical algorithms in computational mathematics

Session Keywords

Automated Testing

Development process

Continuous Integration & Delivery

Secure by Design: Integrating Security into Development

jannakha — Wed, 03 May 2023 11:45:06 +0000

Secure by Design: Integrating Security into Development

Room

HS4 (Ground level)

jannakha Wed, 05/03/2023 - 13:45

Time Slot

Thu 10:45am to 11:30am (7/20/23)

Session length

Long session - 45min, including Q&A

Audience

All Attendees

Session Category

DevOps & Quality Assurance

Cyber security (or lack of) has been covered extensively in the news. Hacker attacks range from bored school kids toying around to state-sponsored ransom-driven targeted strikes. As software engineers it’s our responsibility to incorporate cyber security best practices into the development cycle. In this presentation, I’ll provide a list of resources, best practices, tools and Drupal modules for designing and implementing a more secure Drupal web application and to prepare for penetration testing.

Speaker(s)

Janna Malikova

Senior Software Engineer at Tomato Elephant Studio

Speaker biography

Janna is software engineer and frontend performance specialist from Brisbane, Australia. She makes web applications run fast and shares her knowledge with the world at local meetups and conferences. She is a co-maintainer for a number of open source projects and co-organiser of Drupal events in Australia.

Session Keywords

Security

Development process

What is the secure software supply chain and the current state of the PHP ecosystem

paolo.mainardi — Sun, 23 Apr 2023 11:18:50 +0000

What is the secure software supply chain and the current state of the PHP ecosystem

Room

HS4 (Ground level)

paolo.mainardi Sun, 04/23/2023 - 13:18

Time Slot

Fri 4:15pm to 5:00pm (7/21/23)

Session length

Long session - 45min, including Q&A

Audience

All Attendees

Session Category

DevOps & Quality Assurance

In this talk I’ll present the current state of the software supply chain, the big global recent events (SolarWinds, log4shell, codecov, packagist) and the state of the PHP and Drupal ecosystem, the threats and the mitigations that can be applied using tools like Sigstore, Syft, and Grype for digital signatures, SBOM generation, and automatic vulnerability scanning and how to use them for real-world projects to gain unprecedented levels of knowledge of your digital artifacts.
There will be also a demo of the mentioned tools in action to implement a secure supply chain pipeline for your Drupal projects.

Speaker(s)

Paolo Mainardi

CTO at Sparkfabrik

Speaker biography

Hello, i am Paolo Mainardi, proud founder and CTO of Sparkfabrik.

My role is to drive the company toward innovation, by building cutting-edge and cloud-native web applications and doing Kubernetes consultancy at different levels, from the the cluster management to custom implementations, we are also CNCF Silver Member and Kubernetes Certified Service Provider (KCSP).

When i am not too busy with the company stuff, i like to contribute to open source projects, speaking and organizing conferences and actively participating to the community.

You can get in touch with me on Mastodon: https://continuousdelivery.social/@paolomainardi

Session Keywords

Security

A Drupal core maintainer shares peer code review best practices

xjm — Fri, 24 Mar 2023 07:59:23 +0000

A Drupal core maintainer shares peer code review best practices

Room

HS1 (Ground level)

xjm Fri, 03/24/2023 - 08:59

Time Slot

Wed 4:15pm to 5:00pm (7/19/23)

Session length

Long session - 45min, including Q&A

Audience

Intermediate

Session Category

DevOps & Quality Assurance

Review session slides: Code Review Best Practices (xjm) -- Drupal Developer Days Vienna

Improve your teams' peer code review process, your code maintainability, and your Drupal contributions. Learn from a Drupal core release manager—with over ten years of Drupal core experience—how to give an efficient and effective peer code review.

Peer code reviews are essential, improving maintainability, increasing productivity, and reducing costs. They can also reduce the rate of defects (bugs) introduced into a codebase by as much as 80-90 percent. Most importantly, they build a shared understanding of the application within a team and are an opportunity for developers to mentor each other.

Drupal core's peer code review process has two phases:
1. An initial peer code review cycle with one or more other contributors
2. A final stage of code review by a Drupal core committer (one of the few like xjm who can accept changes into Drupal core's production codebase).

As a result, the core committers are exposed to all the peer review (good and not-so-good) throughout the Drupal core issue queue. This makes committers ideal mentors and subject matter experts on both best practices and pitfalls to avoid.

In this session, you will also discover research and psychological principles on when code review is effective and when it is not. You will learn how structuring your change sets for the reviewer can improve the whole team's code and maintainability. Finally, you will learn about automation and tooling that can help reviewers focus on what's most important.

Speaker(s)

Jess (xjm)

Drupal core committer

Speaker biography

xjm is one of the Drupal core release managers and among the top contributors to Drupal 8, 9, and 10 issues. She is also a member of the Drupal Security Team and has helped coordinate most core security releases since Drupal 8's release in 2015. xjm is looking for funding

Session Keywords