My test suite was green. My software was lying to me.
The author recounts discovering multiple bugs in their security platform, ZDS Core, despite a green test suite. The issues stemmed from the software reporting success while failing to store any data. This experience highlights the importance of testing against real-world scenarios rather than relying solely on unit tests.
- ▪The author found six bugs in their security platform after testing against real data sources.
- ▪Five of the bugs involved the software reporting success while failing to store any data.
- ▪The author emphasizes that an accepted success message is not a reliable indicator of functionality.
DEV.to (Top) files mainly under programming. We currently carry 4,877 of its stories.
Opening excerpt (first ~120 words) tap to expand
try { if(localStorage) { let currentUser = localStorage.getItem('current_user'); if (currentUser) { currentUser = JSON.parse(currentUser); if (currentUser.id === 3825959) { document.getElementById('article-show-container').classList.add('current-user-is-article-author'); } } } } catch (e) { console.error(e); } Saint Zero Day Posted on May 30 My test suite was green. My software was lying to me. #go #security #testing #devops My CI was green. 1,885 tests, 66 packages, zero failures. go vet clean. The build was a single self-contained binary. By every signal a Go project gives you, it worked. Then I pointed it at something real, and watched it lie to my face. This is the story of six bugs I found in my own security platform — ZDS Core — by refusing to trust a green checkmark.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at DEV.to (Top).
Discussion
0 commentsMore from DEV.to (Top)
