V2/tech sca

csp-tech-radar.csv

@@ -8,3 +8,40 @@ Long lived branches with Gitflow,hold,techniques,TRUE,"Gitflow is a strict branc
 Microservices Envy,hold,techniques,TRUE,"Microservices can offer significant advantages to organizations, in terms of improving team autonomy and faster frequency of change. The additional complexity that comes from distributed systems requires an additional level of maturity and investment. We are concerned that some teams are rushing into adopting microservices without understanding the changes to development, test, and operations that are required to do them well. Our general advice remains simple. Avoid microservice envy and start with one or two services before rushing headlong into developing more, to allow your team's time to adjust and understand the right level of granularity."
 Testing as a separate team,hold,techniques,TRUE,"Fast feedback is a core tenet of Agile and critical to the success of a project. Using a separate QA team slows down this feedback, creates an ""us and them"" mentality and makes it more difficult to build quality into the software. Testing should be a tightly integrated activity and isn't something the team can outsource. We recommend integrated teams where testers work closely with developers instead of having testing as a separate organization."
 Anemic REST,hold,techniques,TRUE,"Failure to properly model the domain as a set of resources. Naively developing services that simply expose static, hierarchical data models via templated URLs result in an anemic REST implementation. In a richly modelled domain, REST should enable more than simple repetitive data fetching. In a fully evolved RESTful architecture, business events and abstract concepts are also modelled as resources, and the implementation should make effective use of hypertext, link relations and media types to maximize decoupling between services"
+Spock,adopt,languages & frameworks,FALSE,"A testing and specification framework for Java and Groovy applications. It has been adopted as the standard testing framework for automated functional, integration and SIT tests across the department<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Rockies, Vestrahorn</p>"
+Behave,hold,languages & frameworks,FALSE,"A tool for behavior-driven development (BDD) using tests written in a natural language style, backed up by Python code.<br/>Teams should try to favour BDD tests written with Spock test framework.<br /><br /><p><strong>Teams: </strong>Vesuvius, K2, Rosa</p>"
+Cucumber,hold,languages & frameworks,FALSE,"A software tool that supports behavior-driven development (BDD). Central to the Cucumber BDD approach is its ordinary language parser called Gherkin.<br />Teams should try to favour BDD tests written with Spock test framework.<br /><br /><p><strong>Teams: </strong>Gonzales, K2, Rosa, Fuji</p>"
+Cypress,assess,tools,FALSE,A purely JavaScript-based front-end testing tool.<br />Geb should be preferred instead.<br /><br /><p><strong>Teams: </strong>Gonzales</p>
+Gatling,adopt,tools,FALSE,"An open-source load testing solution for load testing and integrates with development pipelines. <br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Rockies, Gonzales, Vestrahorn, K2, Rosa, Fuji</p>"
+Geb,trial,tools,FALSE,"A browser automation solution which can be used for scripting, scraping and general automation. <br /><br /><p><strong>Teams: </strong>Olympus, Rockies, Gonzales, Vestrahorn</p>"
+Hamcrest,trial,languages & frameworks,FALSE,"A framework that assists writing tests in several langs. It supports creating customized assertion matchers, allowing match rules to be defined declaratively.<br /><br /><p><strong>Teams: </strong>Vesuvius, K2, Rosa</p>"
+Jest,adopt,languages & frameworks,FALSE,A JavaScript testing framework designed to ensure correctness of any JavaScript codebase. <br /><br /><p><strong>Teams: </strong>Gonzales</p>
+Junit,hold,languages & frameworks,FALSE,"A unit testing open-source framework for the Java. This refers to JUnit older than version 4<br /><br /><p><strong>Teams: </strong>Olympus, Gonzales, Huascaran , Annapurna, Fuji, K2, Rosa</p>"
+Mockito,adopt,languages & frameworks,FALSE,"A Java-based framework used for unit testing.  The framework allows the creation of test double objects in automated unit tests for the purpose of test-driven development or behavior-driven development. <br /><br /><p><strong>Teams: </strong>K2, Rosa</p>"
+Moto,trial,tools,FALSE,"A python library for Mocking AWS Services that we will be using to simulate AWS resources.<br /><br /><p><strong>Teams: </strong>K2, Rosa</p>"
+Pact,assess,tools,FALSE,"A code-first tool for testing HTTP and message integrations using contract tests.<br /><br /><p><strong>Teams: </strong>Olympus, Krakatoa, Everest, Fuji</p>"
+PyTest,adopt,languages & frameworks,FALSE,"The Python testing framework. It can be used to write various types of tests, including unit tests, integration tests, end-to-end tests, and functional tests. <br /><br /><p><strong>Teams: </strong>K2, Rosa</p>"
+QTP,hold,tools,FALSE,A software that provides functional and regression test automation for software applications and environments. UFT supports keyword and scripting interfaces and features a graphical user interface. <br /><br /><p><strong>Teams: </strong>Olympus</p>
+Vitest,assess,languages & frameworks,FALSE,A JavaScript testing framework powered by Vite.<br />More teams should use<br /><br /><p><strong>Teams: </strong>Olympus</p>
+Wiremock,adopt,tools,FALSE,"A tool for building mock APIs<br /><br /><p><strong>Teams: </strong>Olympus, Krakatoa, Everest, Rockies, Gonzales, Vestrahorn, Vesuvius, K2, Rosa, Bianco</p>"
+Xunit,adopt,tools,FALSE,A unit testing tool for the .NET platforms.<br /><br /><p><strong>Teams: </strong>Olympus</p>
+AWS,adopt,platforms,FALSE,"Amazon Web Services<br /><br /><p><strong>Teams: </strong>Vesuvius, K2, Rosa, Bianco, Huascaran</p>"
+Core Platform,adopt,platforms,FALSE,"A platform internal to Sky manages Ci/CD processes.<br />To go to on hold<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Rockies, Gonzales, K2, Rosa, Fuji</p>"
+On Prem M25 (SLU & HHE),hold,platforms,FALSE,...<br /><br /><p><strong>Teams: </strong>Gonzales</p>
+On Prem Unix VM,hold,platforms,FALSE,Unix working on a virtual machine on-premise.<br /><br /><p><strong>Teams: </strong>Matterhorn</p>
+On Prem Windows Server,hold,platforms,FALSE,Windows Server working on-premise.<br /><br /><p><strong>Teams: </strong>Etna</p>
+On Prem Windows Server 2012 (VDC) ,hold,platforms,FALSE,Windows Server 2012 (Virtualized Domain Controller Deployment) working on on-premise.<br /><br /><p><strong>Teams: </strong>Krakatoa</p>
+On Prem Windows Server 2012 VM,hold,platforms,FALSE,"Windows Server 2012 working on a virtual machine on-premise.<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Everest, Rockies, Gonzales</p>"
+SDVI,adopt,platforms,FALSE,"Media supply chain management and optimization platform. It enables media companies with its processes.<br /><br /><p><strong>Teams: </strong>Vesuvius, K2, Rosa, Bianco</p>"
+On Prem Windows Server 2016 VM,hold,platforms,FALSE,"Windows Server 2016 working on a virtual machine on-premise.<br /><br /><p><strong>Teams: </strong>Olympus, Everest, Rockies, Gonzales</p>"
+CloudGrid,adopt,platforms,TRUE,"CloudGrid is a platform that provides a core Kubernetes services as well as a common path to production, allowing for teams to deploy more applications at a faster pace. <br /><br /><p><strong>Teams: </strong>Everest</p>"
+Blackduck,adopt,platforms,FALSE,"An app scaning applications and container images, identify all open source components, and detect any open source security vulnerabilities, compliance issues, or code-quality risks.<br />To be replaced by veracode<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Everest, Gonzales, K2</p>"
+Codescene,adopt,tools,TRUE,"A behavioral code analysis tool developed by Empear AB. CodeScene provides code visualizations based on version-control data and machine learning algorithms that identify social patterns and hidden risks in code.<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Matterhorn, Rockies, Gonzales, Vestrahorn, Vesuvius, K2, Rosa, Fuji, Bianco</p>"
+Dependabot,adopt,tools,FALSE,"A feature of GitHub whose main purpose is to assist developers in staying on top of their dependency ecosystem.<br /><br /><p><strong>Teams: </strong>Wrights, Olympus, Krakatoa, Everest, Rockies, Vestrahorn, Fuji</p>"
+SonarLint,assess,tools,FALSE,"A clean code linter for your IDE to help find & fix bugs, security issues & analysis across several programming languages to provide real-time feedback.<br /><br /><p><strong>Teams: </strong>Everest</p>"
+SonarQube,assess,platforms,FALSE,An open-source platform developed by SonarSource for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs and code smells on 29 programming languages.<br />We will engurage Veracode instead<br /><br /><p><strong>Teams: </strong>Everest</p>
+Split,trial,tools,TRUE,"A feature toggling tool which decouples release from deploy.<br /><br /><p><strong>Teams: </strong>Masterminds, Vesuvius, Krakatoa</p>"
+VeraCode,assess,platforms,TRUE,"Cloud-based application security platform used to identify and remediate security vulnerabilities in software applications. <br />It will be the code scanner tool.<br /><br /><p><strong>Teams: </strong>Rockies, Gonzales</p>"
+Stoplight,adopt,platforms,TRUE,"An API Design, Development, and Documentation platform that enables consistency, reusability, and quality.<br /><br /><p><strong>Teams: </strong>All</p>"
+RapidAPI,adopt,platforms,TRUE,"A multi-cloud, customized hub to find, connect to, and share APIs.<br /><br /><p><strong>Teams: </strong>All</p>"
+Octane,adopt,platforms,FALSE,"A testing platform for high-velocity Lean and Agile teams. It includes integrated planning, continuous integration, test management, and release management<br /><br /><p><strong>Teams: </strong>Ben More, Matterhorn, Etna, Huascaran, Annapurna</p>"