Thread by @aclairefication

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero I'd love for you to hear @appsecjosh 's experiences working with dev teams reviewing, merging, and deploying code...

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh If you're interested in #automation around pull requests, I know some devs like @github 's #security vulnerability remediation #opensource
help.github.com/en/articles/co…

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github For a non-dev-centric perspective, you might try
@mheusser 's How a tester can contribute to the code review process searchsoftwarequality.techtarget.com/tip/How-a-test… #testing #whitebox

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser For a non-dev-centric perspective, you might try
@ckenst stickyminds.com/article/partic… #testing #whitebox

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst For a non-dev-centric perspective, you might try
@alanpage 's Peering Into the White Box: A Testers
Approach to Code Reviews [PDF] angryweasel.com/Articles/A%20t… #testing #whitebox

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage For a non-dev-centric perspective, you might try
@imalittletester 's The tester and the code review imalittletester.com/2018/03/08/the… #testing #whitebox

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester If you like an academic source, there's @MIT 's Testing & Code Review
mit.edu/~6.005/fa14/cl… #testing #whitebox

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester @MIT One of my favorite observations in teaching #exploratorytesting to developers is judging a pull request's context to decide whether to visually inspect vs pull down the branch & manually explore the code #testing #whitebox #programming

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester @MIT And depending on the kind of feedback/information you're looking for, you may want to do different kinds of code reviews... en.wikipedia.org/wiki/Code_revi…

including using static analysis tools
e.g. #OWASP owasp.org/index.php/Stat…

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester @MIT There's also @sebrose 's take on #BDD, Cyber-Dojo, & Testers in Code Reviews via @cucumberbdd
cucumber.io/blog/seb-rose-… #testing #whitebox

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester @MIT @sebrose @cucumberbdd I like how @kosmictom breaks down different modes of code review on the @smartbear blog smartbear.com/learn/code-rev… #testing #whitebox #programming

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester @MIT @sebrose @cucumberbdd @KosmicTom @SmartBear I like that designers can get in the code review game, too! bitovi.com/blog/designer-… #UX #testing #whitebox

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester @MIT @sebrose @cucumberbdd @KosmicTom @SmartBear I like @derekprior 's bullet points in this @Github blog github.blog/2015-01-21-how… and there's even a video version :) (vintage @railsconf 2015) #testing #whitebox #programming

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester @MIT @sebrose @cucumberbdd @KosmicTom @SmartBear @derekprior @railsconf I like that @carlosperez calls out continuous review via PR before writing code & supporting #remoteworking team members! medium.com/practical-blen… #testing #whitebox #programming

@bonniea @goldsmithaaron @AllDayDevOps @nnja @oscon @MaggieFero @appsecjosh @github @mheusser @ckenst @alanpage @imalittletester @MIT @sebrose @cucumberbdd @KosmicTom @SmartBear @derekprior @railsconf @carlosperez And if you don't have enough tabs open quite yet, I like being able to make fix requests inline & have them granularly accepted/discussed right in place to make collective ownership even easier! #agile #programming #developerexperience #dx #opensource c.f. github.com/features/code-…