In day one, you'll see and work with a practical example of going from no code to a deployed feature.

In day two, you'll learn various techniques for keeping an existing code base clean.

This workshop is an in-person, hands-on companion to the book 

Tools and techniques for writing and maintaining a code base that fits in your head.

Developers who have suffered through a few bad projects.

C# code examples are written in a style friendly to developers working in C#, Java, TypeScript, C++, etc. Hands-on exercises are in C# on .NET Core 3.1. You don’t have to be a professional C# developer, but you should at least feel comfortable trying your hand with C#. You can get assistance during exercises, but we will not have time to cover basics of installation, compilation, syntax, and such.

You'll need a development environment that enables you to work with C# on .NET Core 3.1, a Git client, and (for some exercises) SQL Server Express. If on Windows, Visual Studio Community Edition is a great fit. In general, free versions of those application will be sufficient.

2 Days

Code That Fits in Your Head

.NET

Architecture

This hands-on workshop provides practical guidance and recommendations. We will cover architecture, technologies, tools, and frameworks. We will examine strategies for organizing your projects, folders, and files. We will design a system that is simple to build and maintain - now and well into the future.

You will leave this workshop having developed the foundation and structure for your next enterprise application, along with the knowledge to take your enterprise application development to the next level.

Required workload - ASP.NET and web development

You can also use your preferred IDE, e.g. Visual Studio Code or JetBrains Rider.

Practical Clean Architecture with .NET 6  

Like most of the harder challenges we face in software development, increasing the security of software is a journey that takes careful planning, a lot of collaboration, and a healthy dose of iterating as you learn more. It’s the type of complex journey that goes more smoothly when you have a map.


In this workshop, we’ll look at what secure software roadmaps are, why they’re a useful tool to use as part of your overall software security approach, and how you can build one of your own.


Over the course of 2 days, you will go from a basic understanding of what makes a good application security program to having planned your own program roadmap- ready for you to go back to your company and implement.

Understanding what an application security program and roadmap are, why they are important and how they are structured

How to measure and understand your current maturity level including how to use OWASP SAMM and OWASP ASVS for measuring your existing programs or practices from a product and lifecycle perspective.

Setting realistic expectations and goals for your program

Defining what actions you can take to weave security through your software development lifecycle

Understanding how to measure progress as you implement your program

Anticipating and planning for common challenges we encounter when developing and implementing an application security program.


Software development leads who wish to support application security across their projects and teams.

Cyber security leaders and application security engineers looking to expand their approach to be more development aware

Those who wish to move towards application security in their organisation in a structured and measurable way.

A solid understanding of the concepts covered

A draft application security program roadmap that is tailored to your organisation and its current maturity level

Build your own application security program

Security

From creating a schema to represent the data contracts, implementing that schema against a data store and how to have a client work with the server, there's a lot of things to consider in the design.

So, let's get started! Over the course of this workshop, we'll learn the building blocks of the GraphQL language, create a server with TypeScript, work with data stores and create a web app to connect to it. With the basics done, it's time to expand with advanced GraphQL features such as real time through subscriptions, creating federated backends to integrate existing APIs and how to handle security.

Connecting GraphQL servers with data stores

Docker + VS Code Remote Containers extension

End to end GraphQL

As one of the essential skills in today's software development, TypeScript can be quite a handful to grasp, especially as it keeps growing to meet ever growing demands.

If you,

want to start with TypeScript but feel intimidated, or

you have already but feel a bit lost with daily struggles against the type checker, or

you feel TypeScript can be used just like Java or C# without much fuss, although

you find online code examples and answers cryptic and hard to comprehend

Then come along to this leisurely and fun workshop! There will be strange and familiar examples, some fun quizzes, plenty of
interaction, but not too much pressure.

We go in with strong intentions. The focus is laying a clear and sound foundation for our understanding, not going over every single feature or quirk of the language.

Specifically, we will,

How to quickly validate our types? How to read the cryptic error messages? How to shorten the feedback cycle for efficient development

Get a good taste of the power of TypeScript, and how we may hurt ourselves this way

We go over a few (just enough, not too many!) key language features, especially those that make TypeScript so different and so powerful, then drive them home with plenty of hands-on.

Let's be open-minded, let TypeScript lead us naturally to new ways of problem solving. With more exercises we observe such effects, push the envelope for ourselves and reinforce the new realisations.


With this workshop under the belt, you should feel calm and comfortable with TypeScript, and have the structure and techniques required to explore on your own the excitement it brings.

No TypeScript experience should be required to attend; but prior programming experience (in any language) is essential.

Intentional TypeScript

This hands-on workshop will take you through an end-to-end software lifecycle, starting with GitHub Issues and Projects for planning, GitHub Codespaces for a super efficient inner loop of development, and GitHub Actions to take your applications into production.

How to effectively plan and track your work using GitHub Issues

How to manage your projects within and across repositories in your organisation

The free and paid options for coding in the cloud, including the web editor and GitHub Codespaces

How and when to use GitHub Actions for non-CI/CD automation

Techniques and strategies for safe and effective software engineering using GitHub tooling

Techniques for effective collaboration in remote teams

Software engineers, team leads, and DevOps specialists, regardless of their level of GitHub adoption.

Any laptop with a keyboard and a browser.

In fact, you could probably get by with a tablet - it's a new world!

End-to-end DevOps with GitHub

DevOps

During the workshop, you use a sample repository and build it locally in Visual Studio. We then walk you through building the application, testing it in GitHub Actions, configuring the release, and passing the artifact to Octopus Deploy for deployment.

You get access to provisioning infrastructure in Azure, building a GitHub Actions workflow, and creating an Octopus Cloud instance. You use these tools to configure and prepare a build. Then you release and deploy a sample application from dev to test to production.

Building your .NET 6 multi-tier application using GitHub Actions

Setting up your application to pass packages to Octopus Deploy from GitHub

Infrastructure as Code (IaC) and how to add infrastructure in Octopus Deploy

Creating Azure Web Apps & SQL PaaS in Azure via IaC

Administration of GitHub Actions, Octopus Deploy, and Azure

Multi-Tenancy, channels, lifecycles, and spaces

Common deployment patterns including canary, blue/green, and red/black

Developers, Ops, and DevOps Engineers starting on their CI/CD journey

Software engineers looking for fresh ideas

Anyone using an older version of Octopus who wants a refresher

Free Azure or MSDN Subscription with access to create an Azure Service Principal (we advise against a corporate subscription)

Email address to spin up your free Octopus instance

Laptop with Windows and the following software:

DevOps in two days with IaC, Azure, GitHub Actions and Octopus Deploy

This hands-on workshop covers modern front end fundamentals, enabling you to create a layout and components without the need for any third-party code. You learn core accessibility concepts to make your project more accessible without having to write complex code, take shortcuts or deal with browser-specific implementations.

Once that is done, we then move on to testing our application, making sure that our accessibility improvements are there, watching for any unintended changes and making sure that the application works as it's supposed to. Through automated tools that can be implemented as part of a deployment pipeline, to manual tools to check on the fly, there are plenty of options to ensure the front end is being tested as thoroughly as the back end.

This workshop is aimed at anyone who works with front end code on a regular basis and needs to keep up to date with the constantly changing world of front end development. Even if you're just brushing up on your skills, this is the workshop for you.

Some experience with front end code desirable, a basic understanding of HTML and CSS. Some experience with JavaScript is also useful, but not essential.

NDC { Melbourne }

Workshops

09:00 - 17:00 (UTC+10)

End-to-end DevOps with GitHub

Damian Brady

Michelle Mannering

Practical Clean Architecture with .NET 6

Jason Taylor

Front End Web Fundamentals

Amy Kapernick

End to end GraphQL

Aaron Powell

Intentional TypeScript

Hackle Wayne

Code That Fits in Your Head

Mark Seemann

Build your own application security program

Laura Bell

DevOps in two days with IaC, Azure, GitHub Actions and Octopus Deploy

Derek Campbell

Peter Gallagher