pii-without-anonymize

Generated from the code · as of CLI 0.6.0

The CLI prints, for example:

application `db` holds personal data and may be branched, with no anonymize rules — branching it would copy real personal data into a preview branch that developers and CI can reach. Declare rules, or set `branch: false`, or clear `contains_pii` if there genuinely is none

Fix it in: arc.yaml.

# Keys that raise it

services.*.contains_pii
services.*.anonymize

shop/arc.yaml

arc: shop
edge: { service: web, port: 3000 }
resources: { cpu: "1", memory: 1Gi, disk: 5Gi }
services:
  web:
    kind: web-service
    contains_pii: false
  db:
    kind: database
    contains_pii: true
    anonymize:
      engine: postgres
      database: shop
      user: shop
      rules:
        - { table: customers, column: email, transform: fake-email }