Using docker to run various SEO, Accessibility, Performance, Security tests on a public URL

1. QUICKLY EXTENDING INTO
TESTING WITH DOCKER

5. PERFORMANCE QUALITY

6. PERFORMANCE QUALITY

7. LIGHTHOUSE

9. LIGHTHOUSE
docker run --rm --name
lighthouse -it -v /root/docker-
tests/lighthouse:/home/chrome/re
ports --cap-add=SYS_ADMIN
femtopixel/google-lighthouse
https://tomcudd.com

17. LIGHTHOUSE
https://github.com/femtopixel/
docker-google-lighthouse

18. PERFORMANCE SPEED

19. PERFORMANCE SPEED

20. PERFORMANCE SPEED

21. PERFORMANCE SPEED

23. SITESPEED.IO
docker run --rm -v /root/docker-
tests/sitespeed.io:/sitespeed.io
sitespeedio/sitespeed.io:8.15.2
https://tomcudd.com

28. SITESPEED.IO
https://www.sitespeed.io

29. SECURITY

30. SECURITY

32. ZAP
docker run -v /root/docker-
tests/zap:/zap/wrk/:rw -t
owasp/zap2docker-stable zap-
baseline.py -t
https://tomcudd.com -g gen.conf
-r tomcudd.html

36. ZAP
https://www.owasp.org/index.php/
OWASP_Zed_Attack_Proxy_Project

37. SEO

38. SEO

39. SEO

41. LINK CHECKER
docker run -it --rm -v
/root/docker-
tests/checklink:/home/checklink
stupchiy/checklink -H
https://tomcudd.com >
/root/docker-tests/checklink-
report.html

44. LINK CHECKER
https://github.com/w3c/link-
checker

45. ACCESSIBILITY

46. ACCESSIBILITY
https://www.w3.org/TR/WCAG21/

48. PA11Y
vim /root/pa11y/config.json
{
"defaults": {
"chromeLaunchConfig": {
"args": ["--no-sandbox"]
},
"timeout": 60000
},
"urls": [
"https://tomcudd.com"
]
}

49. PA11Y
docker run -it -v
/root/pa11y/config.json:/tmp/con
fig.json digitalist/pa11y-
ci:latest pa11y-ci -c
/tmp/config.json

51. GOTCHA’S
• sudo everything or run as root!
• Folder permissions!
• chmod o+w docker-tests/
• chmod o+w docker-tests/*
• Sometimes you make the directories,
sometimes not!
• mkdir docker-tests/pa11y

53. OPTIMIZING
• Google searches I had to do
• Wordpress critical rendering path
• apache gzip compression
• Wordpress lighthouse optimization
• Wordpress minify css

56. BUILDING UP
• Look at other kinds of tests
• Static code analysis (SonarQube)
• Burp Suite (active security scans)
• Load tests (Selenium, Jmeter)
• More Accessibility (Total Validator, NVDA,
Wave)

57. TAKEAWAY
• Low Effort, High Impact!
• Build on momentum

58. LINKS
https://tomcudd.com/docker
@tomcudd