Recomendados
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Similar a Maintainability Sogeti Qx Day 2020
Similar a Maintainability Sogeti Qx Day 2020 (20)
Último
Último (20)
Maintainability Sogeti Qx Day 2020
- 1. QXDay2020 Team up for Quality Engineering Hoe zorg je dat code onderhoudbaar is? Peter Rombouts Senior Technology Consultant Sogeti
- 2. Security Classification © 2019 Sogeti. All rights reserved. 2Presentation title | Date 2 Wie ben ik https://peterrombouts.nl https://www.twitter.com/prombouts https://www.github.com/prombouts https://labs.sogeti.com Senior Technology Consultant Peter Rombouts Cloud Software Architect Meer dan 18 jaar ervaring in IT Gepassioneerd over Software Development, Architectuur en Cloud SogetiLabs Fellow Azure Cloud Cognitive Services Software Development Multi CloudQSD
- 3. Security Classification © 2019 Sogeti. All rights reserved. 3Presentation title | Date Systems and software engineering — Systems and software Quality Requirements and Evaluation (SQuaRE) — System and software quality models Ook wel ISO 25010 genoemd Wat is Software Quality?
- 4. Security Classification © 2019 Sogeti. All rights reserved. 4Presentation title | Date De Internationale Standaard definieert: Quality in Use Model Product Quality Model
- 5. Security Classification © 2019 Sogeti. All rights reserved. 5Presentation title | Date De Internationale Standaard definieert: Quality in Use Model Product Quality Model
- 6. Security Classification © 2019 Sogeti. All rights reserved. 6Presentation title | Date De Internationale Standaard definieert: Quality in Use Model Product Quality Model
- 7. Security Classification © 2019 Sogeti. All rights reserved. 7Presentation title | Date Richtlijnen (SIG) 1. Write Short Units of Code 2. Write Simple Units of Code 3. Write Code Once 4. Keep Unit Interfaces Small 5. Separate Concerns in Modules 6. Couple Architecture Components Loosely 7. Keep Architecture Components Balanced 8. Keep Your Codebase Small 9. Automate Tests 10.Write Clean Code SIG was established in 2000. Its roots can be traced back to the Dutch National Research Institute for Mathematics and Computer Science (Centrum voor Wiskunde en Informatica [CWI]).
- 8. Security Classification © 2019 Sogeti. All rights reserved. 8Presentation title | Date Richtlijnen (SIG) 1. Write Short Units of Code 2. Write Simple Units of Code 3. Write Code Once 4. Keep Unit Interfaces Small 5. Separate Concerns in Modules 6. Couple Architecture Components Loosely 7. Keep Architecture Components Balanced 8. Keep Your Codebase Small 9. Automate Tests 10.Write Clean Code SIG was established in 2000. Its roots can be traced back to the Dutch National Research Institute for Mathematics and Computer Science (Centrum voor Wiskunde en Informatica [CWI]).
- 9. Security Classification © 2019 Sogeti. All rights reserved. 9Presentation title | Date Tools Hoe te kiezen: Static Code Analysis? Software Composition Analysis?
- 10. Security Classification © 2019 Sogeti. All rights reserved. 10Presentation title | Date Welke tooling is beschikbaar? Analyseert de (lines of) code. Normaliter in pipelines en geautomatiseerd. Voorbeelden: • SonarQube • PMD • NDepend • BinSkim Analyseert de dependencies Doorgaans standalone producten met notificaties. Wordt ook vaak ingezet om te controleren of licenties van open-source packages in lijn zijn met policies. Voorbeelden: • WhiteSource • WhiteSource Bolt • Snyk • Fossa • npm-audit • David (Node.JS) Static Code Analysis Software Composition Analysis
- 11. Security Classification © 2019 Sogeti. All rights reserved. 11Presentation title | Date Welke tooling is beschikbaar? Analyseert de (lines of) code. Normaliter in pipelines en geautomatiseerd. Voorbeelden: • SonarQube • PMD • NDepend • BinSkim Analyseert de dependencies Doorgaans standalone producten met notificaties. Wordt ook vaak ingezet om te controleren of licenties van open-source packages in lijn zijn met policies. Voorbeelden: • WhiteSource • WhiteSource Bolt • Snyk • Fossa • npm-audit • David (Node.JS) Static Code Analysis Software Composition Analysis
- 12. Security Classification © 2019 Sogeti. All rights reserved. 12Presentation title | Date Static Code Analysis: SonarQube
- 13. Security Classification © 2019 Sogeti. All rights reserved. 13Presentation title | Date Software Composition Analysis: WhiteSource Bolt
- 14. Security Classification © 2019 Sogeti. All rights reserved. 14Presentation title | Date Software Composition Analysis: WhiteSource Bolt
- 15. Security Classification © 2019 Sogeti. All rights reserved. 15Presentation title | Date Software Composition Analysis: WhiteSource Bolt
- 16. 16Sogeti Global Overview | © 2019 Sogeti. All rights reserved.Sogeti Global Overview | © 2019 Sogeti. All rights reserved. Mind The (Tool) Gap!
- 17. Security Classification © 2019 Sogeti. All rights reserved. 17Presentation title | Date Hoe nu verder?
- 18. Security Classification © 2019 Sogeti. All rights reserved. 18Presentation title | Date Hoe nu verder?
- 19. QXDay2020 Team up for Quality Engineering Vragen? peter.rombouts@sogeti.com https://peterrombouts.nl https://labs.sogeti.com Twitter @prombouts GitHub @prombouts
Notas del editor
- Quality in Use -> 5 characteristics related to outcomes of interaction with a system (including users) Product Quality Model -> Focuses on target computer system that includes the target software product.
- Quality in Use -> 5 characteristics related to outcomes of interaction with a system (including users) Product Quality Model -> Focuses on target computer system that includes the target software product.
- 1. Modularity 2. Reusability 3. Analyzability 4. Modifiability 5. Testability
- At the time of writing, in total SIG has analyzed 7.1 billion lines of code, and 72.7 million new lines of code are uploaded to SIG weekly. SIG is the only organization in the world certified by TÜViT for Trusted Product Maintainability. we have selected metrics that: • Are contained in a set as small as possible • Are technology-independent • Are easy to measure • Enable a meaningful comparison of real-world enterprise software systems
- At the time of writing, in total SIG has analyzed 7.1 billion lines of code, and 72.7 million new lines of code are uploaded to SIG weekly. SIG is the only organization in the world certified by TÜViT for Trusted Product Maintainability. we have selected metrics that: • Are contained in a set as small as possible • Are technology-independent • Are easy to measure • Enable a meaningful comparison of real-world enterprise software systems
- Many tools, what is the ‘golden record’ Another time, another session! C? XML? T-SQL, PL-SQL NIET gratis?
- RDP Session
- Edge: https://dev.azure.com/sogetiazurefundamentals/sogetiazurefundamentals/_build/results?buildId=258&view=whitesource.ws-bolt.build-tab.wss
- Edge: https://dev.azure.com/sogetiazurefundamentals/sogetiazurefundamentals/_build/results?buildId=258&view=whitesource.ws-bolt.build-tab.wss
- Edge: https://dev.azure.com/sogetiazurefundamentals/sogetiazurefundamentals/_build/results?buildId=258&view=whitesource.ws-bolt.build-tab.wss
- Tool gap! Hard to interpret Will never replace pair programming. Peer review, Expert review.
- Turning the Guidelines into Practice Ensuring that your code is easy to maintain depends on two behaviors in your daily routine: discipline and setting priorities. Discipline Lower-Level (Unit) Guidelines Take Precedence Over Higher-Level (Component) Guidelines\ Remember That Every Commit Counts
- Turning the Guidelines into Practice Ensuring that your code is easy to maintain depends on two behaviors in your daily routine: discipline and setting priorities. Discipline Lower-Level (Unit) Guidelines Take Precedence Over Higher-Level (Component) Guidelines\ Remember That Every Commit Counts 15 -> SKIP INDIEN NO TIME