Production readiness
What it takes to ship AI-assisted code safely: testing, review, hardening, authentication and secrets.
Best notes
- Automated markdown linting for memo
An exploration of how Dwarves Foundation automates Markdown quality using modular linting, generative formatting, and cross-repo CI/CD integration.
- How I came up with our security standard
In this memo, I want to share with you my thought process behind our security guideline for Dwarves. This is a critical aspect for a software company that aims to…
Reports
- Automated markdown linting for memo
An exploration of how Dwarves Foundation automates Markdown quality using modular linting, generative formatting, and cross-repo CI/CD integration.
Research notes
- How I came up with our security standard
In this memo, I want to share with you my thought process behind our security guideline for Dwarves. This is a critical aspect for a software company that aims to…
- Working with legacy code
Learn how to navigate large, established codebases without losing your sanity. Discover technical strategies, cultural insights, and AI assistance for thriving in…
- A holistic guide to security
A high-level overview of how to implement a holistic approach to securing your application platform.
- Testing made simple: best practices for Go tests
Learn the best practices for testing in Golang, including writing effective test cases with the AAA pattern, organizing tests with subtests and helpers, using…
- Unit testing in Go, conventions and best practices
How to write unit tests in Go, from file and function naming to table-driven tests and mocking with gomock.
- The key security mechanisms for tackling cyber threats
Learn essential cybersecurity tips from expert Hieu PC on building secure products, protecting data, and staying updated on security standards to prevent hacking and…
- A test case breakdown structure for manual and automated tests
Learn how to manage manual and automated test cases in one documentation using clear naming, separating functional and non-functional tests, and updating early for…
- Testing strategies in React
React testing with unit, integration, and end-to-end approaches
Show all 14 notes
- Level up Go unit tests with Gomock mock objects
Learn how to use Gomock in Go to create mock objects, isolate dependencies, and write effective unit tests that improve code quality and detect bugs early.
- LocalStack lets you test AWS services locally, no AWS bill
LocalStack lets developers locally test and develop AWS services like S3, Lambda, and DynamoDB without AWS costs, speeding up cloud application development with a…
- Boundary and equivalence partitioning in testing
Learn how equivalence partitioning and boundary value analysis reduce test cases while ensuring full functional testing coverage for software input ranges and boundary…
Playbooks
- How we do code review
How we run code review, covering the pull request flow, review principles, minimum standards, and how to word feedback.
- QA practices and definition of done
How QA works during sprints and deployment, with a definition of done example for merging a feature branch.
- Writing frontend tests
How to write unit, component and integration tests for a React app with Jest, Testing Library, Cypress and Mock Service Worker.
- API security checklist
A checklist for securing an API across authentication, access, input, processing and output.
- Basic security practices
Security checklists for laptops, phones, passwords and encryption, plus how to handle vulnerabilities and security reports.
- Defect report template
A template for writing a defect report, with priority and severity definitions and tips for a reproducible bug report.
- Development security checklist
A development security checklist covering transport, storage, logging, Docker, auth flows, user data, input, mobile, headers and operations.
- Test plans, test cases and closure
What a test plan and test case contain, plus a test closure checklist and agile QA practices.