Commit Graph

357 Commits

Author SHA1 Message Date
Siwoo Jung
eb038b6e77 Add redact_and_return_bbox method to ImageRedactorEngine (#1777) 2025-11-07 18:13:09 +02:00
Dor Lugasi-Gal
152ee24a1e AHDS authentication security with ChainedTokenCredential and add CodeQL suppression (#1763)
* adding codeql exemption

* fix: Update comments for DefaultAzureCredential usage in AHDS recognizers

* shorter message

* fix: Enhance authentication setup for AHDS integration with secure-by-default approach
2025-10-28 11:37:35 +02:00
Dor Lugasi-Gal
f1689400f8 fix: Add non-root user to all Dockerfiles for security (#1759)
* fix: add non-root user to all Dockerfiles for security

- Create dedicated user 'presidio' with UID 1001 in all Linux containers
- Add USER directive to ensure containers don't run as root
- Set proper file ownership with chown for production images
- Apply same security fix to Windows containers using net user
- Update sample Dockerfiles to follow security best practices

This addresses the container security requirement that containers
should not run with root privileges.

* fix: configure Poetry to not use virtualenvs in containers

When running as non-root user, Poetry was trying to create virtualenvs
in the user's home directory, causing 'Command not found: gunicorn' errors.

Setting POETRY_VIRTUALENVS_CREATE=false ensures Poetry installs packages
system-wide (already isolated by the container), making them accessible
to the non-root user at runtime.

Tested locally with analyzer container - health and analyze endpoints
working correctly.

* fix: pre-install spaCy model in image-redactor for non-root user

The image-redactor was attempting to install en_core_web_lg at runtime,
which failed when running as non-root user due to write permission issues
on system site-packages.

Installing the model during Docker build (as root) ensures it's available
system-wide for the non-root user to read and use at runtime.

Using en_core_web_lg as the default model, which matches the presidio-analyzer
default configuration.

* fix: add POETRY_VIRTUALENVS_CREATE=false to Windows Dockerfiles

Windows containers also need Poetry configured to install packages
system-wide rather than in virtualenvs to ensure the non-root user
can access the installed dependencies.
2025-10-23 11:07:23 +03:00
Copilot
bef0470ff2 Update Python version support: Remove 3.9 (EOL), Add 3.13 (#1741) 2025-10-17 00:04:59 +03:00
Copilot
2b6d6592ab Add simplified recipes gallery scaffolding for domain-specific Presidio customization examples (#1743) 2025-10-15 16:38:09 +03:00
Ayush Aggarwal
9e32fbe58b feat: add GSTin Recognizer for India Specfic Region (#1744) 2025-10-15 12:03:58 +03:00
Tamir Kamara
e480d3fa68 Update noqa (part 2) (#1736)
* update noqa

* remove noqa which isn't needed
2025-09-28 15:21:12 +03:00
Tamir Kamara
bc4f85b129 Update noqa syntax (#1734) 2025-09-28 08:44:04 +03:00
Jks Liu
892bd46e6a Update 02_regex.md, fix warning of deprecated escape sequence (#1730)
Fix warning of deprecated escape sequence
2025-09-25 09:19:26 +03:00
andyjessen
5ad1bd5955 Fix minor typo (#1727) 2025-09-18 13:56:19 +02:00
Dhouch Lee
3f00a08c1e Added Thai National ID Number (TNIN) recognizer (#1713) 2025-09-10 15:39:52 +03:00
MRADUL TRIPATHI
480e228fc4 Docs: Add YAML and Python example for context-aware recognizers (#1710) 2025-09-06 09:50:09 +03:00
BhargavDT
a67145ca8a update LiteLLM Docs for detailed guide link (#1698)
Co-authored-by: Omri Mendels <omri374@users.noreply.github.com>
Co-authored-by: Tamir Kamara <26870601+tamirkamara@users.noreply.github.com>
2025-09-02 22:53:54 +03:00
Copilot
e68585a5af Implement OIDC trusted publishing for PyPI releases in GitHub Actions (#1702)
* Initial plan

* Initial analysis - planning OIDC transition for PyPI publishing

Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>

* Implement OIDC for PyPI publishing in GitHub Actions

Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>

* Address review feedback: remove Azure Pipeline changes and revert publish matrix

Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>

* Pin pypa/gh-action-pypi-publish to specific SHA instead of tag

Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>

* Use release SHA

* update name

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: tamirkamara <26870601+tamirkamara@users.noreply.github.com>
2025-08-21 22:58:07 +03:00
rishasurana
3f510cf8c4 Azure Health and Data Services (AHDS) De-identification Service Surrogator (#1672) 2025-08-15 23:50:04 +02:00
Sharon Hart
a4d49983e4 Update requirements.txt (#1689) 2025-08-10 14:05:52 +03:00
Sharon Hart
c8efdd7109 Force streamlit dependency versions (#1685) 2025-08-04 13:35:21 +03:00
Sharon Hart
cd9fced789 Force new requests to mitigate GHSA-9hjg-9r4m-mvj7 (#1683)
* lock requests to mitigate GHSA-9hjg-9r4m-mvj7

* e2e req
2025-08-03 12:44:08 +03:00
Sharon Hart
333a1cdefd Update requirements.txt with new dependencies 2025-08-03 10:23:04 +03:00
Siwoo Jung
9a25509b9e Added Korean Resident Registration Number (RRN) recognizer (KrRrnRecognizer) (#1675) 2025-07-29 20:54:53 +03:00
Siwoo Jung
6240351401 Update links in CONTRIBUTING and developing recognizers documentation. (#1674) 2025-07-27 21:14:28 +03:00
Sharon Hart
d7127206bd Revert "Links to discussion board on Docker prebuilt images (#1614)" (#1662)
This reverts commit 1971b827b2.
2025-07-20 12:33:10 +03:00
Risha S.
13f9d4c8b6 Azure Health and Data Services (AHDS) De-identification Service (#1624) 2025-07-16 20:16:28 +03:00
Omri Mendels
94efa23a2f Version 2.2.359 (#1648) 2025-07-13 10:01:35 +03:00
FT
c1a917b0f4 Fix Typos in Documentation and Test Descriptions (#1631)
* Update test_context_support.py

* Update image_redaction_allow_list_approach.ipynb

---------

Co-authored-by: Sharon Hart <sharonh.dev@gmail.com>
2025-06-17 10:46:18 +03:00
Sharon Hart
9bfd4c50a0 Exclude 'recognition_metadata' attribute from REST Analyze Response DTO (#1627)
* Exclude 'recognition_metadata' attribute from REST Analyze Response DTO

* json format

---------

Co-authored-by: Omri Mendels <omri374@users.noreply.github.com>
2025-06-16 17:32:56 +03:00
Vruddhi Shah
5560deeee4 docs: fix spelling, grammar, and style issues in Presidio V2 docs (#1610)
- Corrected spelling errors (e.g., "undergo" → "underwent", "refereed" → "referred")
- Added hyphens to compound adjectives (e.g., Python-based, HTTP-based)
- Improved grammar and sentence clarity
- Replaced vague terms with clearer wording
- Standardized formatting and terminology (e.g., JSON instead of jsons)
- Enhanced overall readability and professionalism

Co-authored-by: Sharon Hart <sharonh.dev@gmail.com>
2025-06-15 14:23:15 +03:00
leopardracer
3a306570e0 Fix Typos in Documentation and Test Descriptions (#1628)
* Update test_context_support.py

* Update index.md

* Update docs/samples/python/transformers_recognizer/index.md

---------

Co-authored-by: Omri Mendels <omri374@users.noreply.github.com>
2025-06-13 11:34:44 +03:00
Sharon Hart
fc6f198c1d Remove run.bat (#1626) 2025-06-11 13:16:06 +03:00
Omri Mendels
1971b827b2 Links to discussion board on Docker prebuilt images (#1614) 2025-06-01 23:39:07 +03:00
Stef Heyenrath
8bf80d104c Fix typo in api-docs.yml (#1602) 2025-05-29 01:04:20 +03:00
Avinandan
e3b24dad14 Update analyzer_engine_provider.md (#1590) 2025-05-15 18:30:10 +03:00
Ron Shakutai
452d6bb1a5 refactor: simplify index retrieval in InstanceCounterAnonymizer (#1577) 2025-05-07 21:24:47 +03:00
Itye Richter
88a9fc6301 Added a new section to the deployments docs (#1462)
* Added a new section to the deployments docs, best practices to deanonymize data when using OpenAI

* dded a line to mkdocs.yaml under samples

* fixed link title

* PR fixes

---------

Co-authored-by: itye-msft <ityer@microsoft.com>
Co-authored-by: Omri Mendels <omri374@users.noreply.github.com>
2025-04-07 18:05:32 +03:00
Omri Mendels
28c4666c74 Add the ability to disable the nlp recognizer (#1558) 2025-04-01 13:43:07 +03:00
Alan
3a884d3cea Update 08_no_code.md (#1561)
Fixed typo
2025-03-26 19:44:19 +02:00
Omri Mendels
64722ebbc1 removed class from api docs (#1554) 2025-03-18 18:42:46 +02:00
Sharon Hart
dcf1ae0359 drop blake2b (#1552)
* drop blake2b

* Update docs/anonymizer/index.md

Co-authored-by: Omri Mendels <omri374@users.noreply.github.com>

* Update test_anonymize_engine.py

---------

Co-authored-by: Omri Mendels <omri374@users.noreply.github.com>
2025-03-17 14:08:29 +02:00
Sharon Hart
a0484ddc2c Replace MD5 with Blake2 (#1550) 2025-03-17 11:25:11 +02:00
Siwoo Jung
cf75c5a0ee Updated the Evaluating DICOM Redaction documentation to reflect changes in verify_dicom_instance() within the DicomImagePiiVerifyEngine class. (#1549) 2025-03-10 12:48:04 +02:00
Omri Mendels
bacf23fa39 Add multiprocessing parameters (#1521) 2025-03-10 11:59:03 +02:00
Ron Shakutai
8b288fae61 docs: Add environment setup and notebook execution guides for Presidio + Spark in Fabric (#1529) 2025-03-06 13:04:30 +02:00
Omri Mendels
7d26bac0a1 example GLiNER integration (#1504) 2025-01-13 11:03:08 +02:00
Omri Mendels
c01f0bd548 minor updates to the mkdocstrings config (#1503) 2025-01-01 08:47:31 +02:00
Omri Mendels
bed2979d4a Docs revamp (#1500) 2024-12-29 13:16:29 +02:00
Omri Mendels
a21a17c2cb Add a link to model classes to simplify configuration (#1472) 2024-11-15 21:34:40 +02:00
Omri Mendels
d238da9008 Update community.md (#1469) 2024-11-15 21:33:59 +02:00
Sharon Hart
ce63783fcc Unlock numpy after dropping 3.8 (#1480) 2024-11-06 15:21:45 +02:00
Omri Mendels
33808c2837 Removed python 3.8 support (EOL) and added 3.12 (#1479) 2024-11-04 11:47:02 +02:00
Akshay Karle
cc31bb6198 Add a link to HashiCorp vault operator resource (#1468) 2024-10-15 12:41:35 +03:00