May 12 PDX evening DUG

Join us Wednesday, May 12 · 6:30 – 7:30pm :)

We talked to Sam Mortenson /samuelmortenson about his project that integrates the SAST tool Psalm (used for checking Symphony) and educates Psalm about Drupal.

The project is available here https://github.com/mortenson/psalm-plugin-drupal

More information is available at the following blog posts

https://mortenson.coffee/blog/drupal-security-testing-everyone/

Also check out the tips on https://www.drupal.org/docs/security-in-drupal/writing-secure-code-for-d...

Other tools that allow you to check for security issues
https://semgrep.dev/
https://www.sonarqube.org/

There may be others that integrate with your favorite IDE and development tools.

Write more secure code! & sleep easier. :)

we also chatted about visual regression testing with https://diffy.website