Hello there! 👋
Welcome to the 157th edition of Software Testing Notes, a weekly newsletter featuring must-read content on Software Testing. I hope this week has been good for you so far.
Exciting Updates to TestDev.Tools!
If you've been using TestDevTools and noticed the site feeling a bit more intuitive lately, that's no coincidence! Our small testing tools directory site has undergone a significant overhaul past few days.
I've transitioned the site from our previous tech stack of Gridsome + Bulma CSS to the dynamic duo of Astro.js and Tailwind CSS.
Whether you're a returning user or just hearing about these changes, I’m sure that these enhancements will make your interaction with TestDev.Tools more enjoyable and productive.
Stay tuned for more updates, and as always, I value your feedback. Let me know what you think or if there's anything more you'd like to see!
Now, onto this week’s curated links.
This week, we will explore:
Dear software testers, is your critical thinking ability even alive?!
Beyond the Code: Crafting the Perfect Test Automation Strategy
Shift-Left Performance Testing: Integrating k6 in CI/CD Pipelines
Automated Accessibility Testing at Slack
Metasploit for Beginners — A Guide to the Powerful Exploitation Framework
and more…
So, let’s dive in.
📚 Testing
Common Misconceptions About Quality Engineering by Jitesh Gosai
What is the true purpose of QE? Jitesh Gosai challenges common misconceptions about Quality Engineering (QE), arguing that simply renaming testers, eliminating manual testing, or making it solely a developer’s responsibility will not lead to true quality improvements.
Dear software testers, is your critical thinking ability even alive?! by Maaike Brinkhof
As current trend is becoming about integrating AI into testing workflows, Maaike Brinkhof shares how this could become a dangerous shift that erodes critical thinking and might actually reduces learning opportunities.
Quality Insight: Why Can't We Be Friends? by Judy Mosley
In this article, Judy Mosley reflects on the evolving relationship between developers and QA professionals and highlights the need for both QA and development teams to work together without assigning blame, fostering collaboration, and focusing on delivering quality software.
🔍 Software Testing
⚙️ Automation
Beyond the Code: Crafting the Perfect Test Automation Strategy by Nishi G.
Effective test automation requires a strategic approach beyond simply writing code. In this article, Nishi outlines key steps to create a well-crafted automation strategy to enhance software quality.
Technical Debt in Testing: Understanding its Cost and Managing It by Juliet Ofoegbu
Technical debt just doesn’t occur in development but in software testing too. Juliet Ofoegbu shares the long-term consequences of ignoring technical debt and offers proactive strategies such as test refactoring, automation, proper documentation, and integrating debt management into sprints to prevent issues.
`grep` for testers by James Lyndsay
The blog post explains the versatility of the grep
command for filtering and searching through data, particularly useful for developers and testers.
Retrofitting Tests into a ReactJS Codebases without tests by Marabesi Matheus
The article explores the Marabesi Matheus's journey in testing ReactJS applications, talks about lessons learned from working with older codebases and open-source projects.
🔍 Test Automation
💨 Performance
Shift-Left Performance Testing: Integrating k6 in CI/CD Pipelines by Sumit Soman
Learn how to integrate k6 into CI/CD pipelines using GitHub Actions. Sumit Soman provides a step-by-step guide on setting up k6, writing a performance test script, and automating load testing on each code push.
Further, also read about how to Visualize k6 Load Tests with Prometheus & Grafana.
Integrating LoadRunner Cloud (LRC) with GitLab CI/CD by Suaad Batis
Suaad Batis explains how to integrate LoadRunner Cloud (LRC) with a GitLab CI/CD pipeline to automate performance testing. The article outlines the process of authenticating with LRC, triggering performance tests, monitoring their status, and downloading the results within the pipeline using LRC's REST API.
🔍 Performance Testing
🌞 Accessibility
Automated Accessibility Testing at Slack by Natalie Stormann
Want to know how Slack does the accessibility testing? Natalie Stormann writes about how encountering challenges with embedding Axe into their Jest and React Testing Library setup, Slack adopted Playwright for accessibility testing, leveraging its flexibility and Axe Core’s customization options to streamline checks and reporting.
Designing Scalable Tests for Feature Flags by Sravanti Tatiraju
Sravanti Tatiraju explores how feature flags introduce complexity in software testing and presents various strategies to efficiently manage test cases for different flag states.
🔍 Accessibility Testing
🔒 Security
Metasploit for Beginners — A Guide to the Powerful Exploitation Framework by Manish M. Shivanandhan
Metasploit — is one of the most versatile tools in cybersecurity. It helps simplify vulnerability testing and exploitation.
Manish M. Shivanandhan explains Metasploit’s key features and provides a hands-on guide to using Metasploit's command-line interface (msfconsole), walking through essential commands for scanning, exploiting vulnerabilities, and conducting post-exploitation activities.
Learn the Basics of API Security by Beau Carnes
This is a 2 hour video course by Beau Carnes covering essential topics like OWASP API Security Top 10, real-world breaches, and strategies for securing APIs.
🔍 Security Testing
🛠️ Resources & Tools
wick-a11y — Interactive Cypress plugin designed for performing configurable accessibility tests using AXE, generating reports with screenshots and details of violations.
cypress-ajv-schema-validator — Cypress plugin for API testing to validate the API responses against Plain JSON schemas, Swagger documents, or OpenAPI documents using Ajv JSON Schema validator.
Portman — Portman converts any OpenAPI spec to a Postman collection, generate contract & variation tests, upload the Postman collection & run the tests through Newman.
Metasploit — is one of the most versatile tools in cybersecurity. It helps simplify vulnerability testing and exploitation.
📝 List of Software Testers
Do you create content around Software Testing ? Submit yours blog details here and I will add it to the list.
🎁 Bonus Content
📌 OTHER INTERESTING STUFF
⭐ LAST WEEK'S MOST READ
A lack of standard (testing) terms hurts us all by Callum Akehurst-Ryan
The Role of AI in Reducing Software Testing Costs by Emma Thomsan
😂 And Finally,
📨 Send Me Your Articles, Tutorials, Tools!
Wrote something? Send links via Direct Message on Twitter @thetestingkit (details here). If you have any suggestions for improvement or corrections, feel free to reply to this email.
Thanks to everyone for subscribing and reading!
Happy Testing!
Pritesh(@priteshusdadiya)
Hi Pritesh, great edition.
I have noticed that the the TestDevTools page for cypress-ajv-schema-validator (https://testdev.tools/cypress-ajv-schema-validator/), does not contain the correct information about "Key Features of cypress-ajv-schema-validator:" and "Benefits of Using cypress-ajv-schema-validator:".
It seems the content has been copy from the wick-a11y tool.
Cheers!