Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

V2/tech sca #69

Open
wants to merge 38 commits into
base: v.2.0
Choose a base branch
from
Open
Changes from all commits
Commits
Show all changes
38 commits
Select commit Hold shift + click to select a range
790601b
Adding Testing Framework, Hosting and Pipeline related tech.
suleymansky Feb 15, 2024
b15acb6
Various visuals were fixed.
suleymansky Feb 15, 2024
8f919ec
Merge branch 'v.2.0' into v2/tech_sca
suleymansky Feb 15, 2024
c14e0a4
Change order
suleymansky Feb 15, 2024
45d9e72
Corrections related to the quadrant.
suleymansky Feb 15, 2024
ea6713d
Fixing typos.
suleymansky Feb 15, 2024
109f3d5
Fix rapidApi type
suleymansky Feb 15, 2024
803edff
Fix about Blackduck
suleymansky Feb 15, 2024
e392687
Octane is added.
suleymansky Mar 1, 2024
20ad501
Tiny fix about Octane.
suleymansky Mar 1, 2024
9b54b0e
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
f108970
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
67e228a
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
677f44d
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
ab813bc
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
e8f0cf9
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
6826e67
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
96bde5d
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
e1b001c
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
f00d148
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
e1d7a6e
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
86f7fbd
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
4d69fa9
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
adfd9c7
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
6a8d1a0
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
8b27e34
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
6f6708e
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
d3fe4bf
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
2727d84
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
a64ad67
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
05714af
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
9d9f03a
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
8452c59
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
fc3bade
Update csp-tech-radar.csv
suleymansky Mar 6, 2024
f6d8a6c
Adding TestRail
suleymansky Mar 6, 2024
b46067c
Merge branch 'v2/tech_sca' of https://github.com/sky-uk/csp-tech-rada…
suleymansky Mar 6, 2024
dbd734e
Huascaran to Huascarán
suleymansky Mar 6, 2024
11f8ab3
Cleanina unnecessary commas at the end of the lines.
suleymansky Mar 6, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 28 additions & 0 deletions csp-tech-radar.csv
Original file line number Diff line number Diff line change
Expand Up @@ -8,3 +8,31 @@ Long lived branches with Gitflow,hold,techniques,TRUE,"Gitflow is a strict branc
Microservices Envy,hold,techniques,TRUE,"Microservices can offer significant advantages to organizations, in terms of improving team autonomy and faster frequency of change. The additional complexity that comes from distributed systems requires an additional level of maturity and investment. We are concerned that some teams are rushing into adopting microservices without understanding the changes to development, test, and operations that are required to do them well. Our general advice remains simple. Avoid microservice envy and start with one or two services before rushing headlong into developing more, to allow your team's time to adjust and understand the right level of granularity."
Testing as a separate team,hold,techniques,TRUE,"Fast feedback is a core tenet of Agile and critical to the success of a project. Using a separate QA team slows down this feedback, creates an ""us and them"" mentality and makes it more difficult to build quality into the software. Testing should be a tightly integrated activity and isn't something the team can outsource. We recommend integrated teams where testers work closely with developers instead of having testing as a separate organization."
Anemic REST,hold,techniques,TRUE,"Failure to properly model the domain as a set of resources. Naively developing services that simply expose static, hierarchical data models via templated URLs result in an anemic REST implementation. In a richly modelled domain, REST should enable more than simple repetitive data fetching. In a fully evolved RESTful architecture, business events and abstract concepts are also modelled as resources, and the implementation should make effective use of hypertext, link relations and media types to maximize decoupling between services"
Spock,adopt,languages & frameworks,FALSE,"A testing and specification framework for Java and Groovy applications. It has been adopted as the standard testing framework for automated unit, functional, integration and SIT tests across the department<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Rockies, Vestrahorn</p>"
Behave,hold,languages & frameworks,FALSE,"A tool for behavior-driven development (BDD) using tests written in a natural language style, backed up by Python code.<br/>Teams should try to favour BDD tests written with Spock test framework.<br /><br /><p><strong>Teams: </strong>Vesuvius, K2, Rosa</p>"
Cucumber,hold,languages & frameworks,FALSE,"A software tool that supports behavior-driven development (BDD). Central to the Cucumber BDD approach is its ordinary language parser called Gherkin.<br />Teams should try to favour BDD tests written with Spock test framework.<br /><br /><p><strong>Teams: </strong>Gonzales, K2, Rosa, Fuji</p>"
Cypress,assess,tools,FALSE,A purely JavaScript-based front-end testing tool.<br />Geb should be preferred instead.<br /><br /><p><strong>Teams: </strong>Gonzales</p>
Gatling,adopt,languages & frameworks,FALSE,"An open-source load testing solution for load testing. Original created with a Scala DSL, it has now developed a Java DSL too.<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Rockies, Gonzales, Vestrahorn, K2, Rosa, Fuji</p>"
Geb,trial,tools,FALSE,"A browser automation solution which can be used for scripting, scraping and general automation. <br /><br /><p><strong>Teams: </strong>Olympus, Rockies, Gonzales, Vestrahorn</p>"
Jest,assess,languages & frameworks,FALSE,A JavaScript testing framework designed to ensure correctness of any JavaScript codebase. <br /><br /><p><strong>Teams: </strong>Gonzales</p>
JUnit,adopt,languages & frameworks,FALSE,"A unit testing open-source framework for the Java. Its latest version is JUnit 5. Teams on versions below this, should consider upgrading to the latest version or converting the tests to Spock tests<br /><br /><p><strong>Teams: </strong>Olympus, Gonzales, Huascarán , Annapurna, Fuji, K2, Rosa</p>"
Pact,trial,tools,FALSE,"A code-first tool for testing HTTP and message integrations using contract tests.<br /><br /><p><strong>Teams: </strong>Olympus, Krakatoa, Everest, Fuji</p>"
PyTest,adopt,languages & frameworks,FALSE,"The Python testing framework. It can be used to write various types of tests, including unit tests, integration tests, end-to-end tests, and functional tests. With Spock taking more relevance in our department for integration, E2E and functional tests, we believe that PyTest should be used mainly for unit tests. <br /><br /><p><strong>Teams: </strong>K2, Rosa</p>"
QTP,hold,tools,FALSE,A software that provides functional and regression test automation for software applications and environments. UFT supports keyword and scripting interfaces and features a graphical user interface. Outdated technology that has a very high maintenance cost. <br /><br /><p><strong>Teams: </strong>Olympus, Krakatoa</p>,,
Vitest,assess,languages & frameworks,FALSE,A JavaScript testing framework powered by Vite.<br />It provides better performance than Jest.<br /><br /><p><strong>Teams: </strong>Olympus</p>
Wiremock,adopt,tools,FALSE,"A tool for building mock APIs<br /><br /><p><strong>Teams: </strong>Olympus, Krakatoa, Everest, Rockies, Gonzales, Vestrahorn, Vesuvius, K2, Rosa, Bianco</p>"
Xunit,adopt,tools,FALSE,A unit testing tool for the .NET platforms.<br /><br /><p><strong>Teams: </strong>Olympus</p>
AWS,adopt,platforms,FALSE,"Amazon Web Services<br /><br /><p><strong>Teams: </strong>Vesuvius, K2, Rosa, Bianco, Huascarán</p>"
Core Platform,adopt,platforms,FALSE,"A platform internal to Sky manages Ci/CD processes.<br />To go to on hold<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Rockies, Gonzales, K2, Rosa, Fuji</p>"
On Prem Servers,hold,platforms,FALSE,"With Sky's direction to migrate to the cloud, on-prem solutions such as M25 datacentres, UNIX and Windows Server VMs are being replaced by Cloud solutions.<br /><br /><p><strong>Teams: </strong>Gonzales, Matterhorn, Etna, Krakatoa, Wrights, Olympus, Everest, Rockies, Vesuvius, K2, Rosa, Bianco</p>
SDVI,adopt,platforms,FALSE,Media supply chain management and optimization platform. Mainly used in the Content domain.<br /><br /><p><strong>Teams: </strong>Vesuvius", K2, Rosa," Bianco</p>"""
CloudGrid,assess,platforms,TRUE,"CloudGrid is a platform that provides a core Kubernetes services as well as a common path to production, allowing for teams to deploy more applications at a faster pace. Still in development.<br /><br /><p><strong>Teams: </strong>Everest</p>"
Blackduck,hold,tools,FALSE,"An app scaning applications and container images, identify all open source components, and detect any open source security vulnerabilities, compliance issues, or code-quality risks.<br />Blackduck is no longer being used at Sky, with Veracode being rolled out as its replacement.<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Everest, Gonzales, K2</p>"
Codescene,adopt,tools,TRUE,"A behavioral code analysis tool developed by Empear AB. CodeScene provides code visualizations based on version-control data and machine learning algorithms that identify social patterns and hidden risks in code.<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Matterhorn, Rockies, Gonzales, Vestrahorn, Vesuvius, K2, Rosa, Fuji, Bianco</p>"
Dependabot,adopt,tools,FALSE,"A feature of GitHub whose main purpose is to assist developers in staying on top of their dependency ecosystem.<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Rockies, Vestrahorn, Fuji</p>"
Split,trial,tools,TRUE,"A feature toggling tool which decouples release from deploy.<br /><br /><p><strong>Teams: </strong>Masterminds, Vesuvius, Krakatoa</p>"
Veracode,assess,tools,TRUE,"Cloud-based application security platform used to identify and remediate security vulnerabilities in software applications.<br /><br /><p><strong>Teams: </strong>Rockies, Gonzales</p>"
Stoplight,adopt,platforms,TRUE,"An API Design, Development, and Documentation platform that enables consistency, reusability, and quality.<br /><br /><p><strong>Teams: </strong>All</p>"
RapidAPI,adopt,platforms,TRUE,"A multi-cloud, customized hub to find, connect to, and share APIs.<br /><br /><p><strong>Teams: </strong>All</p>"
ALM Octane,adopt,platforms,FALSE,"A testing platform for high-velocity Lean and Agile teams. It includes integrated planning, continuous integration, test management, and release management<br /><br /><p><strong>Teams: </strong>Ben More, Matterhorn, Etna, Huascarán, Annapurna</p>"
TestRail,adopt,platforms,FALSE,"A web-based test case management tool. It is used by testers, developers and team leaders to manage, track, and organise software testing efforts.<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Everest, Krakatoa, Vestrahorn, Rockies</p>"