Development process

What we learned introducing PHPStan to a large scale project

simonbaese — Mon, 15 May 2023 07:41:09 +0000

What we learned introducing PHPStan to a large scale project

Room

HS4 (Ground level)

simonbaese Mon, 05/15/2023 - 09:41

Time Slot

Fri 5:10pm to 5:40pm (7/21/23)

Session length

Long session - 45min, including Q&A

Audience

All Attendees

Session Category

DevOps & Quality Assurance

Static code analysis using PHPStan is a powerful tool that enhances the stability of your codebase, ensures adherence to coding standards, and enforces best practices. In the past year, we integrated PHPStan into a large-scale Drupal project, and the session will provide a comprehensive report on our experience navigating a fast-moving codebase, a challenging architecture, and a demanding client. We will cover technical aspects, as well as the project management perspective, which entails effective collaboration and communication among developers.

Speaker(s)

Simon Bäse

Senior Backend Developer at Factorial GmbH

Speaker biography

Speaker

Senior Backend Developer at Factorial GmbH
Co-Founder & Web-Developer at the volunteering platform youvo.org
Research developer for numerical algorithms in computational mathematics

Session Keywords

Automated Testing

Development process

Continuous Integration & Delivery

Secure by Design: Integrating Security into Development

jannakha — Wed, 03 May 2023 11:45:06 +0000

Secure by Design: Integrating Security into Development

Room

HS4 (Ground level)

jannakha Wed, 05/03/2023 - 13:45

Time Slot

Thu 10:45am to 11:30am (7/20/23)

Session length

Long session - 45min, including Q&A

Audience

All Attendees

Session Category

DevOps & Quality Assurance

Cyber security (or lack of) has been covered extensively in the news. Hacker attacks range from bored school kids toying around to state-sponsored ransom-driven targeted strikes. As software engineers it’s our responsibility to incorporate cyber security best practices into the development cycle. In this presentation, I’ll provide a list of resources, best practices, tools and Drupal modules for designing and implementing a more secure Drupal web application and to prepare for penetration testing.

Speaker(s)

Janna Malikova

Senior Software Engineer at Tomato Elephant Studio

Speaker biography

Janna is software engineer and frontend performance specialist from Brisbane, Australia. She makes web applications run fast and shares her knowledge with the world at local meetups and conferences. She is a co-maintainer for a number of open source projects and co-organiser of Drupal events in Australia.

Session Keywords

Security

Development process

A Drupal core maintainer shares peer code review best practices

xjm — Fri, 24 Mar 2023 07:59:23 +0000

A Drupal core maintainer shares peer code review best practices

Room

HS1 (Ground level)

xjm Fri, 03/24/2023 - 08:59

Time Slot

Wed 4:15pm to 5:00pm (7/19/23)

Session length

Long session - 45min, including Q&A

Audience

Intermediate

Session Category

DevOps & Quality Assurance

Review session slides: Code Review Best Practices (xjm) -- Drupal Developer Days Vienna

Improve your teams' peer code review process, your code maintainability, and your Drupal contributions. Learn from a Drupal core release manager—with over ten years of Drupal core experience—how to give an efficient and effective peer code review.

Peer code reviews are essential, improving maintainability, increasing productivity, and reducing costs. They can also reduce the rate of defects (bugs) introduced into a codebase by as much as 80-90 percent. Most importantly, they build a shared understanding of the application within a team and are an opportunity for developers to mentor each other.

Drupal core's peer code review process has two phases:
1. An initial peer code review cycle with one or more other contributors
2. A final stage of code review by a Drupal core committer (one of the few like xjm who can accept changes into Drupal core's production codebase).

As a result, the core committers are exposed to all the peer review (good and not-so-good) throughout the Drupal core issue queue. This makes committers ideal mentors and subject matter experts on both best practices and pitfalls to avoid.

In this session, you will also discover research and psychological principles on when code review is effective and when it is not. You will learn how structuring your change sets for the reviewer can improve the whole team's code and maintainability. Finally, you will learn about automation and tooling that can help reviewers focus on what's most important.

Speaker(s)

Jess (xjm)

Drupal core committer

Speaker biography

xjm is one of the Drupal core release managers and among the top contributors to Drupal 8, 9, and 10 issues. She is also a member of the Drupal Security Team and has helped coordinate most core security releases since Drupal 8's release in 2015. xjm is looking for funding

Session Keywords