Disrupting QA – Emerging Trends in Code Quality Automation • Stephen Magill • GOTO 2019

This presentation was recorded at GOTO Chicago 2019. #GOTOcon #GOTOchgo

Stephen Magill - World-recognized Expert on Program Analysis

ABSTRACT
Historically, static analysis has been widely used to identify defined sets of security issues via overnight runs across entire code bases. A recent trend has been the evolution of static analysis methods and tools to:
1. become much more scalable and
2. leverage machine learning to substantially improve code quality.
These improvements allow a much tighter integration into modern agile development processes. At the same time, the scope of these tools has broadened from purely security-relevant bugs to performance and reliability issues like memory leaks and data races. Google and Facebook have pioneered a new model of static analysis deployment that involves improving developer productivity via broad deployment of extremely scalable static analysis (billions of lines of code / thousands of commits per day).
This talk will review these recent developments as well as the history of static analysis in commercial software and its evolution in the academic world. It will provide an overview of the current commercial landscape, and conclude with best practices [...]

Download slides and read the full abstract here:

#Testing #QA #CodeQuality #Automation #CodeQuality #QualityAssurance

Looking for a unique learning experience?

SUBSCRIBE TO OUR CHANNEL - new videos posted almost daily.

[Bizmonger]

Here's a tool...
Haskell, F#, Kotlin, Rust, or any statically typed functional programming language.

In addition, Property-based testing will expose edge cases by auto generating millions of data inputs for a function under test.

Hence, we can use safer programming languages if we care about removing an entire class of errors.

[benoitCouetilZenika]

Did I miss something or you managed to never mention SonarQube ? I don't know what to think of the tools presented then, are they better ?

[AModernCTO]

How is sonar comparable with those other tools?

[JozefIzso]

Short talk about generally used static tools for Java code analysis.