Testing and QA

DigitalVarys is the Community of Developers and Authors of Technical Content about #DevOps, Cloud, #ProjectManagement, #InformationSecurity, #DataScience and #WebDevelopment.​

Testing and QA Archives covers topics on Testing and QA Phase. Which is One of the Important phase of Software Development Life Cycle (SDLC) which talks about Implementation framework of Testing and QA part of SDLC along with DevOps with Strategies, Trends, and Technologies. Especially, Testing and QA Archives of DigitalVarys talks about Tutorials, Guides, and How To’s on Testing and QA Technologies and Trends.

DevSecOps – Dynamic Analysis DAST with OWASP ZAP and Jenkins.

DevSecOps – Dynamic Analysis DAST with OWASP ZAP and Jenkins.

Dynamic Application Security Testing (DAST) also called Black Box Testing is a testing practice that will test the application by executing your web application. As we know, In SAST, a Web application will be tested inside the application which doesn’t even require that the application should be running. So, when we do Dynamic Analysis, we […]

DevSecOps – Dynamic Analysis DAST with OWASP ZAP and Jenkins. Read More »

Jenkins Sast integration to SonarQube

How to Integrate Jenkins SAST to SonarQube – DevSecOps.

SonarQube is an excellent application that will capture, analyze, and visualize the functional bugs and Security Vulnerabilities. We discussed how to perform static Analysis with Jenkins and before that, we discussed how to implement Security testing in IDE and capture the Vulnerabilities. For both the cases, SonarQube provides an excellent solution with Jenkins to capture

How to Integrate Jenkins SAST to SonarQube – DevSecOps. Read More »

Security Testing with OWASP ZAP Proxy

OWASP ZAP – Zad Attack Proxy and its Features

OWASP ZAP (Zad Attack Proxy) is an opensource Dynamic Application Security Testing (DAST) tool. This will be sitting between web application and end-user and help to identify security vulnerabilities in web application design and architecture. As the name goes, this is Open Web Application Security Project (OWASP) projects. ZAP is one of the successful proxy

OWASP ZAP – Zad Attack Proxy and its Features Read More »

Approaches to Automate Security Testing in CICD Pipelines

Approaches to Automate Security Testing in CICD Pipelines

As part of the current Software application development approach, Security is one of the concerns we should take as serious. The Internet is growing with threats. We must secure our application from those threats in all the possible ways. If we have some structured approach like DevOps for Software development, it will be easy to

Approaches to Automate Security Testing in CICD Pipelines Read More »