cgh-pii

PII and secret detection for cgh. Once installed, every indexed file is scanned inline for personal data and credentials, and the results land in the finding store:

pip install cgh-pii
cgh index
cgh findings --key pii.       # emails, phones, IBANs, cards per file
cgh findings --severity block # private keys, cloud credentials

Detected keys and their severities:

Key	What	Severity
`pii.email`	email addresses	warn
`pii.phone`	international-format phone numbers	warn
`pii.iban`	IBANs, mod-97 validated	warn
`pii.card`	payment card numbers, Luhn validated	warn
`secret.aws_key`	AWS access key ids	block
`secret.private_key`	PEM private key blocks	block
`secret.assignment`	`password = "..."` style hardcoded credentials	warn

Two deliberate properties:

Finding values never contain the matched data. A finding stores the match count and the first line number, not the email or the IBAN itself: findings feed the full-text index and must not spread what they detect.
Validation over recall. Cards must pass Luhn, IBANs must pass mod 97, so a random digit run does not flag a file.

The optional NER tier (person names, locations) installs with pip install "cgh-pii[ner]" and activates with ner = true under [plugin.pii]; it runs deferred, off the indexing hot path.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cgh_pii-0.1.0.tar.gz (6.0 kB view details)

Uploaded Jul 29, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

cgh_pii-0.1.0-py3-none-any.whl (5.6 kB view details)

Uploaded Jul 29, 2026 Python 3

File details

Details for the file cgh_pii-0.1.0.tar.gz.

File metadata

Download URL: cgh_pii-0.1.0.tar.gz
Upload date: Jul 29, 2026
Size: 6.0 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.14

File hashes

Hashes for cgh_pii-0.1.0.tar.gz
Algorithm	Hash digest
SHA256	`50e82a8067ac29e75bc1bb2cc9d8a82994ff4366d56902d93ec9cdd010b0da13`
MD5	`f6b88e607bbe6c479d5056c09354bb87`
BLAKE2b-256	`70c99b745424fb0023a9a75355459643ab9a67ea9b4bdf944e55567d710b48b6`

See more details on using hashes here.

Provenance

The following attestation bundles were made for cgh_pii-0.1.0.tar.gz:

Publisher: release.yml on altikva/cgh

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: cgh_pii-0.1.0.tar.gz
- Subject digest: 50e82a8067ac29e75bc1bb2cc9d8a82994ff4366d56902d93ec9cdd010b0da13
- Sigstore transparency entry: 2281073854
- Sigstore integration time: Jul 29, 2026
Source repository:
- Permalink: altikva/cgh@c5cf968c6ffc45b9f2bcd80a9fe8c3e0ef14d208
- Branch / Tag: refs/heads/develop
- Owner: https://github.com/altikva
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release.yml@c5cf968c6ffc45b9f2bcd80a9fe8c3e0ef14d208
- Trigger Event: workflow_dispatch