Browse QA Skills

Testing API schema evolution patterns including additive changes, field deprecation, type widening, and backward-compatible migration strategies.

Elasticsearch testing including index management, query validation, mapping verification, bulk operation testing, and search relevance scoring.

Comprehensive SQL injection testing patterns including blind SQLi, time-based, union-based, and parameterized query validation techniques.

WebSocket testing including connection lifecycle, reconnection logic, message ordering, backpressure handling, and binary frame testing.

Django application testing with TestCase, fixtures, factory_boy, model testing, view testing, middleware testing, and Django REST framework testing.

Implementing test observability with execution analytics, failure trend analysis, coverage gap detection, and test suite health dashboards.

Generating human-readable test documentation from test code including test catalogs, coverage reports, and living documentation websites.

Testing CI/CD pipeline configurations including build validation, deployment verification, rollback testing, and pipeline-as-code quality checks.

Infrastructure-as-Code testing with Terratest, terraform validate, plan verification, and drift detection for Terraform configurations.

Optimizing test suite execution speed with parallelization, test splitting, caching, selective test execution, and test impact analysis.

Advanced security analysis using GitHub CodeQL to find zero-day vulnerabilities, injection flaws, and security anti-patterns in source code.

Web application security testing using BurpSuite for proxy-based interception, scanning, and manual penetration testing of web applications.

Golden file testing pattern for comparing output against approved baselines with update workflows, diff tools, and version control integration.

Testing GDPR compliance requirements including data deletion, consent management, data portability, right to erasure, and privacy policy enforcement.

Test automation with Gauge framework using Markdown specifications, step implementations in Java/Python/JavaScript/Ruby/C#, concepts, data-driven testing, and living documentation.

Comprehensive file upload testing including format validation, size limits, malware scanning, storage verification, and concurrent upload handling.

Static application security testing using Semgrep for finding vulnerabilities, code smells, and enforcing security policies across codebases.

Comprehensive authentication testing including login flows, password policies, MFA, session management, account lockout, and SSO integration.

End-to-end database testing with test containers, data seeding, cleanup strategies, transaction isolation, and production data anonymization.