Skip to content
This repository was archived by the owner on Oct 16, 2025. It is now read-only.
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
60 changes: 59 additions & 1 deletion .github/workflows/dlp-pipelines.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,44 @@ env:
OUTPUT_GCS_BUCKET: "deidentified_files"

jobs:
skip-workflow:
runs-on: ubuntu-latest

outputs:
skip_inspect: ${{ steps.skip-inspect-workflow.outputs.skip }}
skip_deid: ${{ steps.skip-deid-workflow.outputs.skip }}
skip_reid: ${{ steps.skip-reid-workflow.outputs.skip }}

steps:
- uses: actions/checkout@v2

- name: skip-inspect-workflow
id: skip-inspect-workflow # id used for referencing step
uses: saulmaldonado/skip-workflow@v1
with:
phrase: '[skip-inspect]'
search: '["pull_request"]'
pr-message: 'body'
github-token: ${{ secrets.GITHUB_TOKEN }}

- name: skip-deid-workflow
id: skip-deid-workflow # id used for referencing step
uses: saulmaldonado/skip-workflow@v1
with:
phrase: '[skip-deid]'
search: '["pull_request"]'
pr-message: 'body'
github-token: ${{ secrets.GITHUB_TOKEN }}

- name: skip-reid-workflow
id: skip-reid-workflow # id used for referencing step
uses: saulmaldonado/skip-workflow@v1
with:
phrase: '[skip-reid]'
search: '["pull_request"]'
pr-message: 'body'
github-token: ${{ secrets.GITHUB_TOKEN }}


build-and-unit-test:
permissions:
Expand Down Expand Up @@ -58,7 +96,9 @@ jobs:
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

generate-uuid:
needs: build-and-unit-test
needs:
- build-and-unit-test
- skip-workflow
runs-on: ubuntu-latest

timeout-minutes: 5
Expand Down Expand Up @@ -129,6 +169,9 @@ jobs:
needs:
- generate-uuid
- create-dataset
- skip-workflow

if: ${{ !needs.skip-workflow.outputs.skip_inspect }}

runs-on:
- self-hosted
Expand Down Expand Up @@ -214,6 +257,9 @@ jobs:
needs:
- generate-uuid
- create-dataset
- skip-workflow

if: ${{ !needs.skip-workflow.outputs.skip_inspect }}

runs-on:
- self-hosted
Expand Down Expand Up @@ -292,6 +338,9 @@ jobs:
needs:
- generate-uuid
- create-dataset
- skip-workflow

if: ${{ !needs.skip-workflow.outputs.skip_deid }}

runs-on:
- self-hosted
Expand Down Expand Up @@ -404,6 +453,9 @@ jobs:
needs:
- generate-uuid
- create-dataset
- skip-workflow

if: ${{ !needs.skip-workflow.outputs.skip_deid }}

runs-on:
- self-hosted
Expand Down Expand Up @@ -485,6 +537,9 @@ jobs:
needs:
- generate-uuid
- create-dataset
- skip-workflow

if: ${{ !needs.skip-workflow.outputs.skip_deid }}

runs-on:
- self-hosted
Expand Down Expand Up @@ -644,6 +699,9 @@ jobs:
- generate-uuid
- create-dataset
- de-identification
- skip-workflow

if: ${{ !needs.skip-workflow.outputs.skip_reid }}

runs-on:
- self-hosted
Expand Down
19 changes: 19 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@
* [De-identification](#de-identification)
* [Validation](#validation)
* [Re-identification](#re-identification-from-bigquery)
* [Inspect and Classify](#inspect-and-classify)
* [Pipeline parameters](#pipeline-parameters)
* [Supported file formats](#supported-file-formats)
* [Amazon S3 scanner](#amazon-s3-scanner)
Expand Down Expand Up @@ -447,6 +448,24 @@ to validate de-identified results:
stored in `reid_query.sql`. The re-identified results can be found in the BigQuery
dataset (`dataset` parameter) with the name of the input table as the suffix.

#### Inspect and Classify

```commandline
./gradlew run -DmainClass=com.google.swarm.tokenization.InspectClassify \
-Pargs=" --region=${REGION} \
--project=${PROJECT_ID} \
--tempLocation=gs://${DATA_STORAGE_BUCKET}/temp \
--numWorkers=1 --maxNumWorkers=2 \
--runner=DataflowRunner \
--filePattern=gs://dlp-orc-support-398810-demo-data/inspect_classify/* \
--dataset=inspect_classify \
--inspectTemplateName=${INSPECT_TEMPLATE_NAME} \
--fileTypes=fileType1,fileType2,fileTypeN \
--batchSize=200000 \
--DLPMethod=INSPECT \
--serviceAccount=${SERVICE_ACCOUNT_EMAIL}"
```


### Pipeline Parameters

Expand Down
Loading