1Copyright © Serena Software 2015

Presentation and Demo: “Running the Gauntlet”Dimensions CM 14.2

Ashley Owen

Director, Product Marketing

July 21st , 2015

2

Move Fast Without Breaking Things

HRLEsHighly Regulated Large Enterprises

Speed without riskEnd-to-end

Practitioner specificCollaboration enabled

Enterprise scaled

Supporting allEnterprise methodologies

Enterprise technologiesEnterprise platforms

3

Deployment Automation

Serena Dimensions CM

Dimensions RM Dimensions CM

Improve Software QualityContinuously inspect reported findings and vulnerabilities from your automated “experts” tool chain, enable immediate feedback to developers, monitor KPI/Metrics & trends, and speed release readiness 

Optimized Developer ExperienceCollaborative development practices minimize rework, visualize and reduce conflicts, and improve team velocity while increasing quality. 

No Hands ComplianceTamper-proof audit trials and comprehensive history and activity views assures compliance to standards. Show the auditors in real-time and avoid the expensive costs of collecting and exporting logs in preparation.

Enterprise ScalableScales to meet rigorous security and compliance needs of the largest, most complex and highly distributed application assets and teams, maintaining developer productivity and performance across platforms, technologies and geographies

Hardened centralized SCM repositoryMaintains the security, confidentiality and integrity of your SCM processes and practices, supporting granular role-based access and permissions.

Integrated Peer ReviewWork with your colleagues to improve software quality whether they are in the next cubicle or the next continent. Leave a comments and ideas for review and track implementation and software quality

4

Today’s Speakers

Don IrvineVice-President, ALM Products

Peter RaymondPrincipal Product Architect

5

Dimensions RM 12.3Introducing Serena Dimensions CM 14.2

6

Major Release Themes

Optimize the developer experience

Integrate the developer toolchain

Secure software development

7

Modernize Desktop Client UI

8

• Shelving• Enables developer to quickly switch context• Shelve an in progress change to be picked up at a later date

• Personal streams• Sandbox to isolate work from others• Can be merged into a stream when ready

• Cherry pick merge• Merge just the lines of code changed by a request

Optimize developer experience

Minimize rework, visualize & reduce conflict, improve team velocity

9

• Hiding streams• Hide streams that are no longer in use, reduces clutter

• Favorites & recent streams• Organize the streams into your favourites• Makes finding/opening/picking streams easier

• Desktop client UI refresh• Lighter colours, updated icons• Simpler toolbar/menu layout• New login screen

Optimize developer experience…

10

• Expert Chains• Sequence of tools to inspect or process your code• Analyzes code and provides “Findings” and “Metrics”• Indicates the “health” of your code• Supports “Shift-left” and provides rapid feedback to Developers• Chains can run on delivery, or on a schedule (hourly, daily etc.)

• Expert Plugins• Plugin architecture allows additional experts• Built by Serena or you or our partners• Written in Groovy Script or Java• Shared on Serena Central

Integrate the developer tool chain

11

Build Tools

Jenkins

*TeamCity

*Bamboo

Coding Style

CheckStyle

Code Analysis

Kuiwan/Optimyth

SonarQube

PMD

*Parasoft

Security/Risk Analysis

OWASPDependency Validation

*HP Fortify

*VeraCode SAST

Deployment

SDA

Continuous Inspection “Experts” – Run the Gauntlet

* Red are expert plugins for consideration for future Dimensions CM releases

12

• Improved Peer Review• Findings shown in-line with the code being reviewed• Metrics also shown during review

• Aggregated KPI/Metrics Reporting• Configurable report views of review and expert data• Trends, graphs, tables, totals of metrics from experts

Integrate the developer tool chain…

Provide continuous inspection into the suitability of release readiness

13

• Dependency Vulnerability Expert Plugin• Checks NVD for security issues with delivered components• Based on open source OWASP project• Provides full report of your components and their vulnerabilities

• Certificate based authentication• Provides secure means of authenticating the server• Removes potential man in the middle attacks

• Applets Optional for Web Client and AdminConsole• Makes the browser interfaces more secure• Option to completely turn off applets (still required for version control)

• Certified with latest OS, Browser and Java versions

Secure software development

14

Demonstration

15

• July 28th: Dimensions RM 12.3• Presentation and Demonstration

• August 19th: Dimensions CM “Summer” VUG • Discussion and Demonstration around CM 14 and SDA Best Practices

• September 10th: Take Your Code and Quality to the Next Level• Joint Webcast – Serena & Optimyth

Upcoming Events:

16

Free Upgrade Lab & Serena Central

http://www.serenacentral.com/

17

Answersfor Your

Questions

18

Serena Dimensions CM 14.2Develop collaboratively, securely and efficiently

Core Strengths• Graphical change graph

• Collaborative peer review

• Proven security & performance

• Highly scalable SCCM

• Strong process support

What’s New?• Shelving & Personal Streams

• Integrated “Expert” Tool Chain

• Cherry Pick Merge

• KPI Metrics/Reporting

• REST API

19

Thank you

www.serena.com