diff --git a/docs/guides/software-lifecycle/continuous-testing/testing-frameworks.md b/docs/guides/software-lifecycle/continuous-testing/testing-frameworks.md index 04d1c93fd..1d508afe2 100644 --- a/docs/guides/software-lifecycle/continuous-testing/testing-frameworks.md +++ b/docs/guides/software-lifecycle/continuous-testing/testing-frameworks.md @@ -3,199 +3,221 @@ title: Testing Frameworks sidebar_label: Testing Frameworks --- -* Continuous Testing - * For Code Development - * For Module Testing (xUnit) - - **Java** - - [JUnit](https://junit.org/): A popular Java testing framework for unit and integration testing. - - **JavaScript/TypeScript** - - [Jest](https://jestjs.io/): A widely used JavaScript testing framework for unit and integration testing. - - **Python** - - [PyUnit](https://docs.python.org/3/library/unittest.html#module-unittest): The built-in unit testing library for Python. - - [PyTest](https://docs.pytest.org/): A popular Python testing framework for unit and functional testing. - - **C#** - - [NUnit](https://nunit.org/): A widely used testing framework for .NET applications. - - **C/C++** - - [cUnit](http://cunit.sourceforge.net/)/[CppUnit](https://freedesktop.org/wiki/Software/cppunit/): Testing frameworks for C/C++. - - - For Mocking, Stubbing, and Simulating Test Services - - **Java** - - [Mockito](https://site.mockito.org/): A Java mocking framework for unit testing. - - [EasyMock](https://easymock.org/): A library for creating mock objects in unit tests. - - [JMock](http://jmock.org/): A framework for mocking Java interfaces. - - **Python** - - [PyTest](https://docs.pytest.org/): A popular Python testing framework with mocking support. - - [Nose2](https://docs.nose2.io/en/latest/): A test discovery and execution framework for Python. - - [Mock](https://mock.readthedocs.io/en/latest/): A Python library for mocking objects and behavior. - - **C#** - - [Moq](https://github.com/moq/moq): A mocking framework for .NET. - - [NSubstitute](https://nsubstitute.github.io/): A friendly substitute for .NET mocking libraries. - - [FakeItEasy](https://fakeiteasy.github.io/): An easy-to-use mocking framework for .NET. - - **C/C++** - - [CMock](https://github.com/ThrowTheSwitch/CMock): A mocking framework for C. - - [cpp-stub](https://github.com/coolxv/cpp-stub): A C++ mocking framework. - - [googletest](https://github.com/google/googletest): The Google C++ Testing Framework. - - **HTTP Services** - - [WireMock](http://wiremock.org/): A tool for mocking HTTP services, useful for simulating APIs and services during testing. - - - - - For Code Analysis - - For Static Analysis - - **Java** - - [PMD](https://github.com/pmd/pmd): A source code analyzer for Java, JavaScript, and more. - - [Checkstyle](https://checkstyle.sourceforge.io/): A tool for checking Java code against coding standards. - - [Spotbugs](https://github.com/spotbugs/spotbugs): A static analysis tool for Java bytecode. - - [SonarQube](https://www.sonarqube.org/): A tool combining multiple analyses in a single pass. - - **JavaScript/TypeScript** - - [ESLint](https://eslint.org/): A widely used JavaScript and TypeScript linting tool for identifying and fixing code issues. - - [PMD](https://github.com/pmd/pmd): A source code analyzer for Java, JavaScript, and more. - - [SonarQube](https://www.sonarqube.org/): A comprehensive platform for continuous inspection of code quality and security. - - **Python** - - [PyLint](https://pylint.pycqa.org/en/latest/): A Python static code analysis tool. - - [Pyflakes](https://github.com/PyCQA/pyflakes): A lightweight Python code checker. - - **C#** - - [StyleCop](https://www.nuget.org/packages/StyleCop.Analyzers/): Enforces style and consistency rules in C# code. - - [Roslynator](https://www.nuget.org/packages/Roslynator.Analyzers/): A set of code analyzers, refactorings, and code fixes for C#. - - [XunitAnalyzer](https://www.nuget.org/packages/xunit.analyzers/): Analyzers to improve the quality of xUnit.net tests. - - [SonarAnalyzer](https://www.nuget.org/packages/SonarAnalyzer.CSharp/): A comprehensive platform for continuous inspection of code quality and security. - - **C/C++** - - [CppCheck](https://github.com/danmar/cppcheck): A static analysis tool for C/C++. - - [Clang Static Analyzer](https://clang-analyzer.llvm.org/) / [tidy](https://clang.llvm.org/extra/clang-tidy/): Analyzers for C/C++ code. - - [CodeSonar](https://codesecure.com/our-products/codesonar/): A tool for static code analysis, addressing bugs and security issues in source and binary code. - - - For Dynamic Analysis - - For Test Coverage - - **Java** - - [Jacoco](https://www.jacoco.org/jacoco/): A Java code coverage library. - - [Cobertura](https://github.com/cobertura/cobertura): A Java code coverage tool. - - **Python** - - [Coverage](https://github.com/nedbat/coveragepy): A Python code coverage measurement tool. - - [PyTest-cov](https://github.com/pytest-dev/pytest-cov): A PyTest plugin for coverage reporting. - - **C#** - - [AltCover](https://github.com/SteveGilham/altcover): A .NET code coverage tool. - - [NCover](http://ncover.sourceforge.net/): A code coverage tool for .NET. - - **C/C++** - - [lcov](https://github.com/linux-test-project/lcov): A code coverage tool for Linux. - - [OpenCppCoverage](https://github.com/OpenCppCoverage/OpenCppCoverage): An open-source C++ code coverage tool. - - **JavaScript/TypeScript** - - [Istanbul](https://istanbul.js.org/): A code coverage tool for JavaScript and TypeScript. - - [Jest Coverage](https://jestjs.io/docs/configuration#coverage): Code coverage support in Jest. - - - For Complexity Analysis and Runtime Performance - - - **Java** - - [JMeter](https://jmeter.apache.org/): An Apache tool for performance testing. - - [JProfiler](https://www.ej-technologies.com/products/jprofiler/overview.html): A Java profiler. - - [JPF](https://github.com/javapathfinder/jpf-core): The Java PathFinder model checker. - - **Python** - - [Scalene](https://github.com/plasma-umass/scalene): A high-performance profiler for Python. - - [trace](https://docs.python.org/3/library/trace.html)/[inspect](https://docs.python.org/3/library/inspect.html)/[pdb](https://docs.python.org/3/library/pdb.html): Python debugging tools. - - **C#** - - [Performance Profiler](https://docs.microsoft.com/en-us/visualstudio/profiling/profiling-feature-tour?view=vs-2022#analyze-performance-legacy-tools): Profiling tools in Visual Studio. - - [Parasoft Dottest](https://www.parasoft.com/products/parasoft-dottest/): A .NET code quality and security testing tool. - - [ANTS Profiler](https://www.red-gate.com/products/dotnet-development/ants-performance-profiler/): A .NET profiler. - - **C/C++** - - [Valgrind](https://valgrind.org/): A programming tool for memory analysis and profiling. - - [Gcov](https://gcc.gnu.org/onlinedocs/gcc/Gcov.html): A code coverage tool for GCC. - - - For Security - - [Scrub/Coverity/CodeQL](https://nasa.github.io/scrub/usage.html#supported-cots-tools-and-languages): Tools for code analysis and security scanning. - - [SonarQube](https://www.sonarqube.org/): An open-source platform for continuous inspection of code quality. - - - For Web Applications - - For Service Endpoints (APIs) - - - For RESTful Endpoints - - - [JMeter](https://jmeter.apache.org/): An Apache tool for performance testing. - - [Postman](https://www.postman.com/): A popular API testing tool. - - [REST Assured](https://rest-assured.io/): A Java library for RESTful API testing. - - [SOAPUI](https://www.soapui.org/): A comprehensive API testing tool. - - For RPC/Remote Processing - - [Powershell](https://devblogs.microsoft.com/scripting/testing-rpc-ports-with-powershell-and-yes-its-as-much-fun-as-it-sounds/): PowerShell for testing RPC ports. - - [PortQry Interactive](https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/portqry-command-line-port-scanner-v2#step-2-specialized-tests): Command-line port scanner. - - For User Interfaces (UIs) - - [Robot Framework](https://robotframework.org/): An open-source test automation framework. - - [Selenium](https://www.selenium.dev/): A popular web testing framework. - - [Cypress](https://www.cypress.io/): An end-to-end testing framework. - - [Playwright](https://github.com/microsoft/playwright): A browser automation library. - - [Serenity BDD](https://serenity-bdd.info/): A test automation framework that combines Selenium, JUnit, and BDD practices. - - [Allure](http://allure.qatools.ru/): An open-source framework for test report generation with interactive and informative reports. - - - For Cross-Browser Testing - - [BrowserStack](https://www.browserstack.com/): A cloud-based cross-browser testing platform. - - [Sauce Labs](https://saucelabs.com/): A cloud-based testing platform for web and mobile applications. - - [CrossBrowserTesting](https://crossbrowsertesting.com/): A cross-browser testing tool by SmartBear. - - - For Security - - [OWASP ZAP](https://www.zaproxy.org/): An open-source security testing tool for finding web application vulnerabilities. - - [Burp Suite](https://portswigger.net/burp): A popular security testing tool for web application security assessment. - - - For Performance Testing - - For Load Testing - - [JMeter](https://jmeter.apache.org/): An Apache tool for performance testing. - - [Gatling](https://gatling.io/): A high-performance load testing tool. - - [Locust](https://locust.io/): An open-source load testing tool. - - For Acceptance Testing - - [Cucumber](https://cucumber.io/docs/installation/): A collaboration and automation platform for Behavior-Driven Development (BDD). - - [Chaos Monkey](https://netflix.github.io/chaosmonkey/): A tool for testing system resilience. - - [Robot Framework](https://robotframework.org/): An open-source test automation framework. - - - - - For Mobile Testing - - - For All Platforms - - [Appium](https://appium.io/): An open-source mobile automation framework. - - - For Android - - [Selenium/Selendroid](http://selendroid.io/): Selenium-based testing for Android. - - [Espresso](https://developer.android.com/training/testing/espresso): Google's native UI testing framework for Android. - - - For iOS - - [Selenium/ios-driver](http://ios-driver.github.io/ios-driver/): Selenium-based testing for iOS. - - [XCTest](https://developer.apple.com/documentation/xctest): Apple's native framework for UI testing on iOS devices. - - - For Reporting - - - For Unified Analyses (Dynamic and Static) - - [SonarQube](https://www.sonarqube.org/): An open-source platform for continuous inspection of code quality. - - [Scrub/Unified](https://nasa.github.io/scrub/usage.html#supported-cots-tools-and-languages): Tools for code analysis and security scanning. - - - For Status Reporting - - [Testrail API Reporting](https://www.gurock.com/testrail/): Test management and reporting tool. - - [Jenkins](https://www.jenkins.io/) with [Code Coverage API Plugin](https://plugins.jenkins.io/code-coverage-api/): Jenkins plugin for code coverage reporting. - - [Travis CI](https://travis-ci.org/) with [Code Climate](https://docs.travis-ci.com/user/code-climate/) or [Codecov](https://about.codecov.io/tool/travis-ci/): An automated code review platform. - - - For Real-time Validation and Stability - - [Jenkins](https://www.jenkins.io/): An automation server for building, testing, and deploying. - - [GitHub Actions](https://github.com/features/actions): CI/CD workflows powered by GitHub. - - [Docker Container](https://docs.docker.com/get-started/): Containerization technology for managing test environments. - - - For AI/ML Testing - - [TensorFlow Test](https://www.tensorflow.org/tfx): A testing framework for machine learning models developed using TensorFlow. - - - For System Testing - - [Robot Framework](https://robotframework.org): An open-source automation framework that supports both test automation and test process automation. - -- For Test Code Generation - - Downloadable Open-Source Models - - [Ollama](https://ollama.com): A streamlined tool for running various large language models. - - [codellama](https://huggingface.co/docs/transformers/model_doc/code_llama): A large language model-based code generation tool. - - [StarCoder](https://huggingface.co/bigcode/starcoder): A popular large language model for code generation, particularly suited for multi-language support. - - [Llama3](https://ollama.com/library): A language model designed for code generation and other tasks. - - Cloud-Based Models (⚠️ Exercise caution when using sensitive data) - - [GPT-4](https://openai.com/gpt-4): The latest version of Generative Pre-trained Transformers (GPT), a type of deep learning model used for natural language processing and text generation. - - [Claude](https://www.anthropic.com/claude): One of the leading models with longer context windows than GPT-4, allowing it to maintain coherence and understanding over longer sequences of text. - -Here's an improved version with additional models included: +## Continuous Testing + +### For Code Development + +#### For Module Testing (xUnit) + +- **Java** + - [JUnit](https://junit.org/): A popular Java testing framework for unit and integration testing. +- **JavaScript/TypeScript** + - [Jest](https://jestjs.io/): A widely used JavaScript testing framework for unit and integration testing. +- **Python** + - [PyUnit](https://docs.python.org/3/library/unittest.html#module-unittest): The built-in unit testing library for Python. + - [PyTest](https://docs.pytest.org/): A popular Python testing framework for unit and functional testing. +- **C#** + - [NUnit](https://nunit.org/): A widely used testing framework for .NET applications. +- **C/C++** + - [cUnit](http://cunit.sourceforge.net/)/[CppUnit](https://freedesktop.org/wiki/Software/cppunit/): Testing frameworks for C/C++. + +#### For Mocking, Stubbing, and Simulating Test Services + +- **Java** + - [Mockito](https://site.mockito.org/): A Java mocking framework for unit testing. + - [EasyMock](https://easymock.org/): A library for creating mock objects in unit tests. + - [JMock](http://jmock.org/): A framework for mocking Java interfaces. +- **Python** + - [PyTest](https://docs.pytest.org/): A popular Python testing framework with mocking support. + - [Nose2](https://docs.nose2.io/en/latest/): A test discovery and execution framework for Python. + - [Mock](https://mock.readthedocs.io/en/latest/): A Python library for mocking objects and behavior. +- **C#** + - [Moq](https://github.com/moq/moq): A mocking framework for .NET. + - [NSubstitute](https://nsubstitute.github.io/): A friendly substitute for .NET mocking libraries. + - [FakeItEasy](https://fakeiteasy.github.io/): An easy-to-use mocking framework for .NET. +- **C/C++** + - [CMock](https://github.com/ThrowTheSwitch/CMock): A mocking framework for C. + - [cpp-stub](https://github.com/coolxv/cpp-stub): A C++ mocking framework. + - [googletest](https://github.com/google/googletest): The Google C++ Testing Framework. +- **HTTP Services** + - [WireMock](http://wiremock.org/): A tool for mocking HTTP services, useful for simulating APIs and services during testing. + +### For Code Analysis + +#### For Static Analysis + +- **Java** + - [PMD](https://github.com/pmd/pmd): A source code analyzer for Java, JavaScript, and more. + - [Checkstyle](https://checkstyle.sourceforge.io/): A tool for checking Java code against coding standards. + - [Spotbugs](https://github.com/spotbugs/spotbugs): A static analysis tool for Java bytecode. + - [SonarQube](https://www.sonarqube.org/): A tool combining multiple analyses in a single pass. +- **JavaScript/TypeScript** + - [ESLint](https://eslint.org/): A widely used JavaScript and TypeScript linting tool for identifying and fixing code issues. + - [PMD](https://github.com/pmd/pmd): A source code analyzer for Java, JavaScript, and more. + - [SonarQube](https://www.sonarqube.org/): A comprehensive platform for continuous inspection of code quality and security. +- **Python** + - [PyLint](https://pylint.pycqa.org/en/latest/): A Python static code analysis tool. + - [Pyflakes](https://github.com/PyCQA/pyflakes): A lightweight Python code checker. +- **C#** + - [StyleCop](https://www.nuget.org/packages/StyleCop.Analyzers/): Enforces style and consistency rules in C# code. + - [Roslynator](https://www.nuget.org/packages/Roslynator.Analyzers/): A set of code analyzers, refactorings, and code fixes for C#. + - [XunitAnalyzer](https://www.nuget.org/packages/xunit.analyzers/): Analyzers to improve the quality of xUnit.net tests. + - [SonarAnalyzer](https://www.nuget.org/packages/SonarAnalyzer.CSharp/): A comprehensive platform for continuous inspection of code quality and security. +- **C/C++** + - [CppCheck](https://github.com/danmar/cppcheck): A static analysis tool for C/C++. + - [Clang Static Analyzer](https://clang-analyzer.llvm.org/) / [tidy](https://clang.llvm.org/extra/clang-tidy/): Analyzers for C/C++ code. + - [CodeSonar](https://codesecure.com/our-products/codesonar/): A tool for static code analysis, addressing bugs and security issues in source and binary code. + +#### For Dynamic Analysis + +##### For Test Coverage + +- **Java** + - [Jacoco](https://www.jacoco.org/jacoco/): A Java code coverage library. + - [Cobertura](https://github.com/cobertura/cobertura): A Java code coverage tool. +- **Python** + - [Coverage](https://github.com/nedbat/coveragepy): A Python code coverage measurement tool. + - [PyTest-cov](https://github.com/pytest-dev/pytest-cov): A PyTest plugin for coverage reporting. +- **C#** + - [AltCover](https://github.com/SteveGilham/altcover): A .NET code coverage tool. + - [NCover](http://ncover.sourceforge.net/): A code coverage tool for .NET. +- **C/C++** + - [lcov](https://github.com/linux-test-project/lcov): A code coverage tool for Linux. + - [OpenCppCoverage](https://github.com/OpenCppCoverage/OpenCppCoverage): An open-source C++ code coverage tool. +- **JavaScript/TypeScript** + - [Istanbul](https://istanbul.js.org/): A code coverage tool for JavaScript and TypeScript. + - [Jest Coverage](https://jestjs.io/docs/configuration#coverage): Code coverage support in Jest. + +##### For Complexity Analysis and Runtime Performance + +- **Java** + - [JMeter](https://jmeter.apache.org/): An Apache tool for performance testing. + - [JProfiler](https://www.ej-technologies.com/products/jprofiler/overview.html): A Java profiler. + - [JPF](https://github.com/javapathfinder/jpf-core): The Java PathFinder model checker. +- **Python** + - [Scalene](https://github.com/plasma-umass/scalene): A high-performance profiler for Python. + - [trace](https://docs.python.org/3/library/trace.html)/[inspect](https://docs.python.org/3/library/inspect.html)/[pdb](https://docs.python.org/3/library/pdb.html): Python debugging tools. +- **C#** + - [Performance Profiler](https://docs.microsoft.com/en-us/visualstudio/profiling/profiling-feature-tour?view=vs-2022#analyze-performance-legacy-tools): Profiling tools in Visual Studio. + - [Parasoft Dottest](https://www.parasoft.com/products/parasoft-dottest/): A .NET code quality and security testing tool. + - [ANTS Profiler](https://www.red-gate.com/products/dotnet-development/ants-performance-profiler/): A .NET profiler. +- **C/C++** + - [Valgrind](https://valgrind.org/): A programming tool for memory analysis and profiling. + - [Gcov](https://gcc.gnu.org/onlinedocs/gcc/Gcov.html): A code coverage tool for GCC. ---- +### For Security + +- [Scrub/Coverity/CodeQL](https://nasa.github.io/scrub/usage.html#supported-cots-tools-and-languages): Tools for code analysis and security scanning. +- [SonarQube](https://www.sonarqube.org/): An open-source platform for continuous inspection of code quality. + +## For Web Applications + +### For Service Endpoints (APIs) + +#### For RESTful Endpoints + +- [JMeter](https://jmeter.apache.org/): An Apache tool for performance testing. +- [Postman](https://www.postman.com/): A popular API testing tool. +- [REST Assured](https://rest-assured.io/): A Java library for RESTful API testing. +- [SOAPUI](https://www.soapui.org/): A comprehensive API testing tool. + +#### For RPC/Remote Processing + +- [Powershell](https://devblogs.microsoft.com/scripting/testing-rpc-ports-with-powershell-and-yes-its-as-much-fun-as-it-sounds/): PowerShell for testing RPC ports. +- [PortQry Interactive](https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/portqry-command-line-port-scanner-v2#step-2-specialized-tests): Command-line port scanner. + +#### For User Interfaces (UIs) + +- [Robot Framework](https://robotframework.org/): An open-source test automation framework. +- [Selenium](https://www.selenium.dev/): A popular web testing framework. +- [Cypress](https://www.cypress.io/): An end-to-end testing framework. +- [Playwright](https://github.com/microsoft/playwright): A browser automation library. +- [Serenity BDD](https://serenity-bdd.info/): A test automation framework that combines Selenium, JUnit, and BDD practices. +- [Allure](http://allure.qatools.ru/): An open-source framework for test report generation with interactive and informative reports. + +### For Cross-Browser Testing + +- [BrowserStack](https://www.browserstack.com/): A cloud-based cross-browser testing platform. +- [Sauce Labs](https://saucelabs.com/): A cloud-based testing platform for web and mobile applications. +- [CrossBrowserTesting](https://crossbrowsertesting.com/): A cross-browser testing tool by SmartBear. + +### For Security + +- [OWASP ZAP](https://www.zaproxy.org/): An open-source security testing tool for finding web application vulnerabilities. +- [Burp Suite](https://portswigger.net/burp): A popular security testing tool for web application security assessment. + +## For Performance Testing + +### For Load Testing + +- [JMeter](https://jmeter.apache.org/): An Apache tool for performance testing. +- [Gatling](https://gatling.io/): A high-performance load testing tool. +- [Locust](https://locust.io/): An open-source load testing tool. + +### For Acceptance Testing + +- [Cucumber](https://cucumber.io/docs/installation/): A collaboration and automation platform for Behavior-Driven Development (BDD). +- [Chaos Monkey](https://netflix.github.io/chaosmonkey/): A tool for testing system resilience. +- [Robot Framework](https://robotframework.org/): An open-source test automation framework. + +## For Mobile Testing + +### For All Platforms + +- [Appium](https://appium.io/): An open-source mobile automation framework. + +### For Android + +- [Selenium/Selendroid](http://selendroid.io/): Selenium-based testing for Android. +- [Espresso](https://developer.android.com/training/testing/espresso): Google's native UI testing framework for Android. + +### For iOS + +- [Selenium/ios-driver](http://ios-driver.github.io/ios-driver/): Selenium-based testing for iOS. +- [XCTest](https://developer.apple.com/documentation/xctest): Apple's native framework for UI testing on iOS devices. + +## For Reporting + +### For Unified Analyses (Dynamic and Static) + +- [SonarQube](https://www.sonarqube.org/): An open-source platform for continuous inspection of code quality. +- [Scrub/Unified](https://nasa.github.io/scrub/usage.html#supported-cots-tools-and-languages): Tools for code analysis and security scanning. + +### For Status Reporting + +- [Testrail API Reporting](https://www.gurock.com/testrail/): Test management and reporting tool. +- [Jenkins](https://www.jenkins.io/) with [Code Coverage API Plugin](https://plugins.jenkins.io/code-coverage-api/): Jenkins plugin for code coverage reporting. +- [Travis CI](https://travis-ci.org/) with [Code Climate](https://docs.travis-ci.com/user/code-climate/) or [Codecov](https://about.codecov.io/tool/travis-ci/): An automated code review platform. + +### For Real-time Validation and Stability + +- [Jenkins](https://www.jenkins.io/): An automation server for building, testing, and deploying. +- [GitHub Actions](https://github.com/features/actions): CI/CD workflows powered by GitHub. +- [Docker Container](https://docs.docker.com/get-started/): Containerization technology for managing test environments. + +## For AI/ML Testing + +- [TensorFlow Test](https://www.tensorflow.org/tfx): A testing framework for machine learning models developed using TensorFlow. + +## For System Testing + +- [Robot Framework](https://robotframework.org): An open-source automation framework that supports both test automation and test process automation. + +## For Test Code Generation + +### Downloadable Open-Source Models + +- [Ollama](https://ollama.com): A streamlined tool for running various large language models. +- [codellama](https://huggingface.co/docs/transformers/model_doc/code_llama): A large language model-based code generation tool. +- [StarCoder](https://huggingface.co/bigcode/starcoder): A popular large language model for code generation, particularly suited for multi-language support. +- [Llama3](https://ollama.com/library): A language model designed for code generation and other tasks. +### Cloud-Based Models (⚠️ Exercise caution when using sensitive data) +- [GPT-4](https://openai.com/gpt-4): The latest version of Generative Pre-trained Transformers (GPT), a type of deep learning model used for natural language processing and text generation. +- [Claude](https://www.anthropic.com/claude): One of the leading models with longer context windows than GPT-4, allowing it to maintain coherence and understanding over longer sequences of text. +## For more comprehensive continuous testing frameworks, please refer to the following links: -- For more comprehensive continuous testing frameworks, please refer to the following links: - - [OWASP DevSecOps Guideline](https://owasp.org/www-project-devsecops-guideline/latest/) - - [Static Code Analysis Tools by OWASP](https://owasp.org/www-project-devsecops-guideline/latest/02a-Static-Application-Security-Testing#tools) +- [OWASP DevSecOps Guideline](https://owasp.org/www-project-devsecops-guideline/latest/) +- [Static Code Analysis Tools by OWASP](https://owasp.org/www-project-devsecops-guideline/latest/02a-Static-Application-Security-Testing#tools)