How do you manage outside developer help
Hey there!
I have a large list of features on my roadmap that I'm thinking of getting some additional dev support on. Since I can't pay full time workers, I would need to use a freelancing site like UpWork, Freelancer, etc. for a short term.
I'm very hesitant about giving someone access to my repository or any back-end details as I don't want to compromise any security ... or have my spaghetti code stolen ;)
What is the best way you provide access for a developer like this that stays secure but also gets good results. i.e. partial access to a repo, or get them to develop in a sandbox and move the code over myself?
If you can't trust your developers, you shouldn't be working with them!!! :D
PS. If you need help with projects, then hit me up, I'm looking for some gigs right now.
Email address is in my profile.
Don't stick any production credentials in your source. Make sure they can build and test locally, maybe against a staging server or local docker containers, depending on the type of task. That way, the worst they can do is pinch a copy of your app. If that's a concern, break your application into microservices- that way they're only got part of the picture.
This comment was deleted 6 years ago
Wow. In these days of malware and ransomware, I'm surprised by your attitude when working with a complete stranger who may not even be in this country or governed by our lows. The city of Atlanta spent 2.6M on ransomware last year... I think this is a very thorny and difficult problem and I don't have a good answer for it except to maybe get a lot of recommendations and hire someone whose work and reputation you know...JMHOFWIW
Great reply. thank you. You're probably right, as long as I find good developers I shouldn't worry too much
This comment was deleted 6 years ago