Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
@Demolishun the problem with a lot (not all) of the types of things I'm talking about is we often circumvent the actual value-add in order to show up green on a report. Dumb example: We submitted our code for automated testing to our security scanner, just to show up green, because the app itself wasn't supported. Later, there was a vulnerability in a dependency that required us to cut the dependency out of our tests. Again, so we show up green on a report. This was in code that never ran on production infra, that had no security scanning requirements.
Other instances are easier to see at least SOME value-added, but the continued work required to remain in self-imposed compliance is not small. -
@Demolishun Unfortunately there isn't. And after a few discussions about that we were told to just make the report happy so it stopped coming up. The same security tool will fail your project if you don't have any third party dependencies, because it assumes you did something wrong 🤷♂️
I'm sure there are good theoretical reasons for most of the things that get passed down to us. The hard thing is that there's virtually zero nuance when it's a large company. Everyone gets the same blanket requirements even though the projects are extremely varied.
When you have something in your clipboard but then press Ctrl+C instead of Ctrl+V and end up with a blank line...
Avast. :/
No, thank you, you nice little app. If you wanted to call someone to find out the weather, I think I can do it...
Me: Why do we do this this time consuming, low value thing?
My tech lead: Because if we don't, a box becomes red on some executive report.
Me: Why is this deadline so important? It's not customer facing or any kind of critical bug/vulnerability?
My tech lead: Because it was a company wide mandate, and we'll show up on some executive report if we're late.
Me: *angry dev noises*
They must dole out lashings to the tech leads and the directors any time we fail to meet some completely arbitrary demand. The act like the world is going to end any time we get too close to a deadline 🤦♂️
Makes no sense that they then turn around and worship the ground senior leadership walks on. I wonder if it's some weird form of stockholm syndrome.
rant
leadership
wasting my fucking time
why