Testcontainers
Testcontainers eliminates the gap between mocked database behavior and real database behavior by spinning up actual Docker containers during test runs. This post covers the full setup for Postgres, Redis, and MongoDB in both Node.js and Python, including parallel container execution, GitHub Actions integration, and concrete techniques to keep
Prisma
This post covers two complementary strategies for testing Prisma ORM: fast unit tests using jest.mock to stub @prisma/client, and reliable integration tests using TestContainers to spin up a real Postgres instance. You'll learn how to keep your test suite both fast and trustworthy by knowing when
GraphQL
Code-first GraphQL frameworks like Pothos (TypeScript) and Strawberry (Python) generate schemas from type-annotated code, which fundamentally changes the testing approach. Your types become the schema, so testing the types tests the schema. This post covers testing strategies specific to code-first GraphQL — plugin testing, type resolution, auth guards, Relay pagination, and
Semgrep
Semgrep is a fast, syntax-aware static analysis tool that lets you write custom security rules in YAML using code patterns rather than regular expressions. This guide covers rule syntax, writing custom rules for your codebase, using community rulesets, CI integration, and reducing false positives through triage and rule refinement. Key
OWASP ZAP
OWASP ZAP is the most widely used open-source web application security scanner. This guide covers integrating ZAP's Docker-based full scan and API scanning into GitHub Actions CI/CD pipelines, configuring authentication for authenticated scans, and handling alert triage to keep pipelines actionable. Key Takeaways Run ZAP as Docker
Nuclei
Nuclei is a fast, template-driven vulnerability scanner that lets teams define custom checks in YAML and run them reproducibly against targets. This guide covers template syntax, writing custom templates for application-specific vulnerabilities, CI integration for regression testing, and responsible scanning and disclosure practices. Key Takeaways Nuclei templates are the unit
Hasura
Hasura generates a GraphQL API directly from your PostgreSQL schema, which means your tests must cover things that don't exist in hand-written APIs: role-based permission rules, relationship traversal, computed fields backed by SQL functions, and event triggers. This post shows a complete pytest-based testing strategy for Hasura with
GraphQL
GraphQL APIs require a layered testing strategy that covers resolvers in isolation, schema stitching, and full client-to-server flows. This guide walks through unit testing individual resolvers with Jest, integration testing with Apollo Server's executeOperation, end-to-end testing with real clients, mocking with MSW, and testing subscriptions — with tool recommendations
GraphQL
GraphQL schemas evolve, and every change carries the risk of breaking clients. Contract testing catches breaking changes before deployment by comparing schema versions and validating that client queries still work against the new schema. This post covers what counts as a breaking change, how to use GraphQL Inspector for schema
Maestro
Maestro is a mobile testing framework that replaces imperative test code with declarative YAML flows. You describe what the user does — tap this, type that, assert visible — and Maestro handles synchronization, retries, and cross-platform execution. This guide covers the flow syntax, handling dynamic content, CI integration, and how Maestro compares
Expo
Expo adds a layer of abstraction over React Native that requires specific testing strategies. The jest-expo preset handles most of the configuration complexity, but mocking expo-* modules, testing Expo Router's file-based navigation, and connecting Detox to the bare workflow each have their own patterns. This guide covers unit
Appium
Appium 2.x is a significant architectural departure from Appium 1.x — drivers and plugins are now installed separately, the server is leaner, and WebdriverIO has emerged as the best client library for writing and running tests. This guide covers the complete setup for iOS and Android, element locator discovery