pii_safe_schema 1.1.0 → 1.3.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9822040f81e24ee9314973cd495c014cf6170a53ed8d8896b0f35575e0be5332
-  data.tar.gz: e4a0236f9fe223582babe0e27643be0cea1e71d77da7210c7e9260b0cd95df91
+  metadata.gz: c846ca865ea611c8d178be2a5ee32ba4cca2d6b955747c72004a561c9124058a
+  data.tar.gz: c696456e1ef21bda144362b1b6fc1c37b87f3869ec0a370415530f9242f7a43a
 SHA512:
-  metadata.gz: 946cb5a5b94dae2dde45f45deb836964b0013f3c3ee0641ebd69379b9470459041777478866e6abc8904f3070185095c820edc7b5c07aab603e32ac235389ae1
-  data.tar.gz: f34869383b818c33019421edd2c9d7a5ecae4206083c5d73cdfab25232365ede802c5e3c392fa446bfc3d30707e77fdbc43ac5057c818dbe37ec66c105138ad1
+  metadata.gz: fb04c0f77566544162769a4f4a83fa352c8c395fa145b3a2de65ada8f94ff80d5695c07ccefc0e62c68ae2f047e049b9040ed517e87e63cbbd0e43b9c5656055
+  data.tar.gz: 8816b7fc9f0446b9fecccd5a9083c785ad1524d272d4ca7d7fb470bcdd82e3fd44c7dc7ea0d9f762ed97f6a2964d5c0d85626e6307ee187fd2c5e2e3e95e3103

data/.circleci/config.yml

@@ -3,7 +3,7 @@ version: 2
 defaults: &defaults
   working_directory: /home/circleci/wealthsimple
   docker:
-    - image: circleci/ruby:2.6.0
+    - image: circleci/ruby:2.7.2
     - image: circleci/postgres:9.5.9-alpine
       environment:
         POSTGRES_USER: circleci
@@ -84,12 +84,15 @@ workflows:
       - checkout_and_bundle:
           context: wealthsimple
       - rspec:
+          context: wealthsimple
           requires:
             - checkout_and_bundle
       - lint_check:
+          context: wealthsimple
           requires:
             - checkout_and_bundle
       - vulnerability_check:
+          context: wealthsimple
           requires:
             - checkout_and_bundle
       - release:
@@ -98,9 +101,9 @@ workflows:
             branches:
               only: master
           requires:
-          - rspec
-          - lint_check
-          - vulnerability_check
+            - rspec
+            - lint_check
+            - vulnerability_check
 
   security-audit:
     triggers:
@@ -114,5 +117,6 @@ workflows:
       - checkout_and_bundle:
           context: wealthsimple
       - vulnerability_check:
+          context: wealthsimple
           requires:
             - checkout_and_bundle

data/.rubocop.yml

@@ -1,3 +1,7 @@
+---
 inherit_gem:
   ws-style:
     - default.yml
+
+AllCops:
+  TargetRubyVersion: 2.6

data/.ruby-version

@@ -1 +1 @@
-2.6.0
+2.7.2

data/CHANGELOG.md

@@ -4,6 +4,33 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 1.3.3 - 2021-03-15
+### Changed
+- Pull CI images from ECR repository
+
+## 1.3.2 - 2021-03-15
+### Changed
+- Update development to Ruby 2.7.2
+
+## 1.3.1 - 2019-11-06
+### Fixed
+- Passing arguments to `rake pii_safe_schema:generate_migrations` actually works
+
+## 1.3.0 - 2019-11-04
+### Added
+- Can pass explicitly annotate PII columns from the command line as arguments when using `rake pii_safe_schema:generate_migrations`.
+
+## 1.2.0 - 2019-4-20
+### Added
+- Can pass Datadog Client object as a configuration option.
+
+### Changed
+- Specs use SQLite3 instead of Postgres, further unblocking local development
+- README got a facelift 😍
+
+### Fixed
+- Development on Windows 10 environments now work
+
 ## 1.1.0 - 2019-4-18
 ### Added
 - Added MIT License

data/README.md

@@ -1,28 +1,44 @@
-## PiiSafeSchema
+# PII Safe Schema [![CircleCI](https://circleci.com/gh/wealthsimple/pii_safe_schema.svg?style=svg)](https://circleci.com/gh/wealthsimple/pii_safe_schema) [![Coverage Status](https://coveralls.io/repos/github/wealthsimple/pii_safe_schema/badge.svg?branch=master)](https://coveralls.io/github/wealthsimple/pii_safe_schema?branch=master)
 
-this gem serves a few functions:
+Schema migration tool for checking and adding comments on *Personally Identifiable Information* (PII) columns in Rails.
+
+Specifically, this gem serves a few functions:
 
 * Warning you when you might be missing an annotation on a column
-* auto generating your migrations for you
-* alerting the security team through datadog events if there are remaining unannotated columns
+* Auto generating your migrations for you
+* Customizable actions through Datadog Events if there are remaining unannotated columns. E.g. alerting your Security Team
+
+![Screenshot of Datadog Event alert](datadog_example.png)
+
+## Why
+
+Data privacy is an ever increasing concern for users, especially if your project or business is in sensitive industries like healthcare or finance.
 
+Having structured metadata on the database level of your application ensures Business Intelligence consumers (I.e. Periscope Data) can appropriately filter or obfuscate columns that personally identify your users without impacting business needs.
 
+In other words, as your attack surface increases, the risk of user PII disclosure remains the same.
 
-### Getting Started
+In your data warehousing pipeline, consume the structured metadata this gem provides in order to maintain the privacy of your users.
 
-`gem 'pii_safe_schema'`
+## Getting Started
 
-add the following to `application.rb`
+Add your Rails project Gemfile:
 
+```ruby
+gem 'pii_safe_schema'
 ```
+
+Then, to your `application.rb`
+
+```ruby
 config.after_initialize do
   PiiSafeSchema.activate!
 end
 ```
 
-if you want to ignore certain columns, add the following initializer:
+If you want to ignore certain columns, add the following initializer:
 
-```
+```ruby
 # initializers/pii_safe_schema.rb
 
 PiiSafeSchema.configure do |config|
@@ -30,17 +46,54 @@ PiiSafeSchema.configure do |config|
     some_table:       :*,                       # ignore the whole table
     some_other_table: [:column_1, :column_2]    # just those columns
   }
+
+  # Pass whatever instance you want here, but it must implement the method
+  # #event(title, message, opts = {})
+  # which is what datadog-statsd does:
+  config.datadog_client =  Datadog::Statsd.new(
+    Rails.application.secrets.fetch(:datadog_host),
+    Datadog::Statsd::DEFAULT_PORT,
+    # ...
+  )
 end
 ```
 
-### Generating Comment Migrations
+## Generating Comment Migrations
+
+```bash
+rake pii_safe_schema:generate_migrations
+```
+
+This will generate one migration file for each table that should be commented. It will create a comment field for each column that it warns you about when you start a rails server or console.
+
+### Explicit annotations
+
+If the generator fails to identify a PII column, you can specify explicitly what columns in what tables are PII. This is particularly useful if you're installed pii_safe_schema into an existing project.
+
+```bash
+rake pii_safe_schema:generate_migrations [table:column:annotation_type] ...
+```
+
+Run `rake pii_safe_schema:generate_migrations help` for details
 
-`rake pii_safe_schema:generate_migrations`
+## Credits
 
-this will generate one migration file for each table that should be commented.
-it will create a comment field for each column that it warns you about when you start a rails server or console.
+Thanks to [Alexi Garrow](https://github.com/AGarrow) for the original code.
 
+## Contributing
 
+Everyone is encouraged to help improve this project. Here are a few ways you can help:
 
+* [Report bugs](https://github.com/wealthsimple/pii_safe_schema/issues)
+* Fix bugs and [submit pull requests](https://github.com/wealthsimple/pii_safe_schema/pulls)
+* Write, clarify, or fix documentation
+* Suggest or add new features
 
+To get started with development and testing:
 
+```bash
+git clone https://github.com/wealthsimple/pii_safe_schema.git
+cd pii_safe_schema
+bundle install
+bundle exec rspec
+```

data/lib/pii_safe_schema.rb

@@ -1,3 +1,4 @@
+require 'pii_safe_schema/invalid_column_error'
 require 'pii_safe_schema/configuration'
 require 'pii_safe_schema/annotations'
 require 'pii_safe_schema/notify'
@@ -18,6 +19,10 @@ module PiiSafeSchema
     @configuration ||= Configuration.new
   end
 
+  def self.reset_configuration!
+    @configuration = Configuration.new
+  end
+
   def self.configure
     yield(configuration)
   end
@@ -32,7 +37,56 @@ module PiiSafeSchema
     Rails.logger.info('PiiSafeSchema: No DB'.red)
   end
 
-  def self.generate_migrations
-    PiiSafeSchema::MigrationGenerator.generate_migrations(PiiSafeSchema::PiiColumn.all)
+  def self.generate_migrations(additional_pii_columns = [])
+    PiiSafeSchema::MigrationGenerator.generate_migrations(
+      PiiSafeSchema::PiiColumn.all + additional_pii_columns,
+    )
+  end
+
+  def self.parse_additional_columns(arguments)
+    arguments.map do |str|
+      matches = /([a-z_]+):([a-z_]+):([a-z_]+)/i.match(str)
+      return print_help! if matches.blank?
+
+      suggestion = Annotations.comment(matches[3])
+      return print_help! if suggestion.blank?
+
+      PiiColumn.from_column_name(table: matches[1], column: matches[2], suggestion: suggestion)
+    end
+  end
+
+  def self.print_help!(do_exit: true) # rubocop:disable Metrics/MethodLength
+    puts <<~HELPMSG # rubocop:disable Rails/Output
+      Usage:
+        rake pii_safe_schema:generate_migrations [table:column:annotation_type] ...
+
+      Arguments:
+        [table:column:annotation_type]   # A column to manually annotate. Can be repeated.
+                                         # annotation_type can be "email", "phone", "ip_address",
+                                         # "geolocation", "address", "postal_code", "name",
+                                         # "sensitive_data", or "encrypted_data"
+
+      Description:
+        Generates a migration to add PII annotation comments to appropriate columns on a table.
+        Uses a series of regular expressions to find sensitive fields.
+
+        Optionally supply arguments to annotate columns explicitly
+
+      Example:
+        rake pii_safe_schema:generate_migrations signatures:signatory_name:name signatures:landline:phone
+
+        Will generate a migration with the following, assuming automatic regex had no matches:
+
+        class ChangeCommentsInSignatures < ActiveRecord::Migration[5.2]
+          def change
+            safety_assured do
+              change_column :signatures, :signatory_name, :string, comment: '{"pii":{"obfuscate":"name_obfuscator"}}'
+              change_column :signatures, :landline, :string, comment: '{"pii":{"obfuscate":"phone_obfuscator"}}'
+            end
+          end
+        end
+    HELPMSG
+
+    exit(1) if do_exit # rubocop:disable Rails/Exit
   end
 end

data/lib/pii_safe_schema/annotations.rb

@@ -70,14 +70,18 @@ module PiiSafeSchema
       nil
     end
 
+    def self.comment(annotation_type)
+      COLUMNS.dig(annotation_type.to_sym, :comment)
+    end
+
     def apply_recommendation?(column, pii_info)
       !encrypted?(column) &&
-        pii_info[:regexp].match(column.name) &&
+        pii_info[:regexp].match?(column.name) &&
         column.comment != pii_info[:comment].to_json
     end
 
     def encrypted?(column)
-      COLUMNS[:encrypted_data][:regexp].match(column.name)
+      COLUMNS[:encrypted_data][:regexp].match?(column.name)
     end
 
     def apply_encrypted_recommendation?(column)

data/lib/pii_safe_schema/configuration.rb

@@ -5,12 +5,14 @@ module PiiSafeSchema
       ar_internal_metadata: :*,
     }.freeze
 
+    KNOWN_DD_CLIENTS = %w[DataDogClient Ws::Railway::Datadog].freeze
+
     def initialize
       @user_ignore = {}
     end
 
     def ignore=(ignore_params)
-      validate(ignore_params)
+      validate_ignore(ignore_params)
       @user_ignore = ignore_params
     end
 
@@ -18,6 +20,19 @@ module PiiSafeSchema
       @user_ignore.merge(DEFAULT_IGNORE)
     end
 
+    def datadog_client=(client)
+      raise_config_error(:datadog_client) if client.present? && !client.respond_to?(:event)
+
+      @datadog_client = client
+    end
+
+    def datadog_client
+      @datadog_client ||=
+        KNOWN_DD_CLIENTS.find do |client|
+          client.safe_constantize if defined?(client)
+        end
+    end
+
     def ignore_tables
       ignore.select { |_k, v| v.to_s == '*' }.keys.map(&:to_s)
     end
@@ -28,11 +43,11 @@ module PiiSafeSchema
 
     private
 
-    def validate(ignore_params)
-      raise_config_error unless ignore_params.is_a?(Hash)
+    def validate_ignore(ignore_params)
+      raise_config_error(:ignore) unless ignore_params.is_a?(Hash)
 
-      ignore_params.values.each do |ip|
-        raise_config_error unless valid_column_list?(ip) || ip == :*
+      ignore_params.each_value do |ip|
+        raise_config_error(:ignore) unless valid_column_list?(ip) || ip == :*
       end
       true
     end
@@ -41,19 +56,37 @@ module PiiSafeSchema
       value.is_a?(Array) && value.all? { |c| c.is_a?(Symbol) }
     end
 
-    def raise_config_error
-      raise ConfigurationError, ConfigurationError.message
+    def raise_config_error(problem)
+      raise ConfigurationError, problem
     end
   end
 
   class ConfigurationError < StandardError
-    def self.message
-      <<~HEREDOC
-        ignore must be a hash where the values are
-        symbols or arrays of symbols.
-        e.g. ignore = { some_table: :* } ##ignore the whole some_table
-        or   ignore = { some_table: [:some_column, :some_other_column] }
-      HEREDOC
+    IGNORE_MSG = <<~HEREDOC.freeze
+      ignore must be a hash where the values are
+      symbols or arrays of symbols.
+      e.g. ignore = { some_table: :* } ##ignore the whole some_table
+      or   ignore = { some_table: [:some_column, :some_other_column] }
+    HEREDOC
+
+    DD_CLIENT_MSG = <<~HEREDOC.freeze
+      Datadog client must be implement #event(title, text, opts = {})
+
+      Consider using dogstatsd-ruby gem and pass in Datadog::Statsd.new(...)
+      as the client.
+    HEREDOC
+
+    def initialize(problem)
+      super(
+        case problem
+        when :ignore
+          IGNORE_MSG
+        when :datadog_client
+          DD_CLIENT_MSG
+        else
+          problem
+        end
+      )
     end
   end
 end

data/lib/pii_safe_schema/invalid_column_error.rb

@@ -0,0 +1,4 @@
+module PiiSafeSchema
+  class InvalidColumnError < StandardError
+  end
+end

data/lib/pii_safe_schema/migration_generator.rb

@@ -18,9 +18,7 @@ module PiiSafeSchema
         migration_file = generator.create_migration_file
         file_lines = File.open(migration_file, 'r').read.split("\n")
         change_line = file_lines.find_index { |i| /def change/.match(i) }
-        new_contents = file_lines[0..change_line] +
-                       generated_lines +
-                       file_lines[change_line + 1..-1]
+        new_contents = file_lines[0..change_line] + generated_lines + file_lines[change_line + 1..]
 
         File.open(migration_file, 'w') do |f|
           f.write(new_contents.join("\n"))

data/lib/pii_safe_schema/notifiers/data_dog.rb

@@ -1,17 +1,20 @@
 module PiiSafeSchema
   module Notify
     module DataDog
-      KNOWN_CLIENTS = %w[DataDogClient Ws::Railway::Datadog].freeze
+      # deprecated
+      KNOWN_CLIENTS = PiiSafeSchema::Configuration::KNOWN_DD_CLIENTS
 
       class << self
         def deliver(pii_column)
           return unless %w[staging production development].include?(Rails.env)
-          return if dog_client.nil?
+          return if datadog_client.nil?
 
-          dog_client.event('PII Annotation Warning',
-                           message(pii_column),
-                           msg_title: 'Unannotated PII Column',
-                           alert_type: 'warning')
+          datadog_client.event(
+            'PII Annotation Warning',
+            message(pii_column),
+            msg_title: 'Unannotated PII Column',
+            alert_type: 'warning',
+          )
         end
 
         private
@@ -20,10 +23,8 @@ module PiiSafeSchema
           "column #{pii_column.table}.#{pii_column.column.name} is not annotated"
         end
 
-        def dog_client
-          KNOWN_CLIENTS.each do |client|
-            return client.safe_constantize if defined?(client)
-          end
+        def datadog_client
+          PiiSafeSchema.configuration.datadog_client
         end
       end
     end

data/lib/pii_safe_schema/pii_column.rb

@@ -3,10 +3,6 @@ module PiiSafeSchema
     extend PiiSafeSchema::Annotations
     attr_reader :table, :column, :suggestion
 
-    def self.all
-      find_and_create
-    end
-
     def initialize(table:, column:, suggestion:)
       @table = table.to_sym
       @column = column
@@ -14,6 +10,20 @@ module PiiSafeSchema
     end
 
     class << self
+      def all
+        find_and_create
+      end
+
+      def from_column_name(table:, column:, suggestion:)
+        activerecord_column = connection.columns(table.to_s).find { |c| c.name == column.to_s }
+
+        unless activerecord_column
+          raise InvalidColumnError, "column \"#{column}\" does not exist for table \"#{table}\""
+        end
+
+        new(table: table, column: activerecord_column, suggestion: suggestion)
+      end
+
       private
 
       def find_and_create

data/lib/pii_safe_schema/version.rb

@@ -1,3 +1,3 @@
 module PiiSafeSchema
-  VERSION = '1.1.0'.freeze
+  VERSION = '1.3.3'.freeze
 end

data/lib/tasks/pii_safe_schema.rake

@@ -1,5 +1,26 @@
 namespace :pii_safe_schema do
   task generate_migrations: :environment do
-    PiiSafeSchema.generate_migrations
+    PiiSafeSchema.print_help! if ARGV[2] == 'help'
+
+    if ARGV.length == 1
+      PiiSafeSchema.generate_migrations
+    else
+      additional_columns = PiiSafeSchema.parse_additional_columns(ARGV[1..])
+      PiiSafeSchema.generate_migrations(additional_columns)
+    end
+
+    exit(0) # forces rake to stop after this and not assume args are tasks
+  rescue ActiveRecord::StatementInvalid, PiiSafeSchema::InvalidColumnError => e
+    raise e if e.instance_of?(ActiveRecord::StatementInvalid) && e.cause.class != PG::UndefinedTable
+
+    puts <<~HEREDOC
+      Unable to generate PII annotation migration. Either the underlying table or column does not exist:
+
+      #{e.message}
+
+      Please create the table & columns first, running their migrations, before attempting to use the pii_safe_schema generator.
+    HEREDOC
+
+    exit(1) # forces rake to stop after this and not assume args are tasks
   end
 end

data/pii_safe_schema.gemspec

@@ -10,6 +10,8 @@ Gem::Specification.new do |s|
 
   s.summary       = 'Schema migration tool for checking and adding comments on PII columns.'
   s.homepage      = 'https://github.com/wealthsimple/pii_safe_schema'
+  s.license       = "MIT"
+  s.required_ruby_version = Gem::Requirement.new(">= 2.6")
 
   s.files = `git ls-files -z`.split("\x0").reject do |f|
     f.match(%r{^(test|spec|features)/})
@@ -19,25 +21,28 @@ Gem::Specification.new do |s|
   s.executables   = s.files.grep(%r{^exe/}) { |f| File.basename(f) }
   s.require_paths = ['lib']
 
-  s.add_dependency 'activesupport', '>= 5'
+  s.add_dependency 'activesupport', '>= 5', '< 7'
   s.add_dependency 'colorize'
-  s.add_dependency 'rails', '>= 5'
+  s.add_dependency 'rails', '>= 5', '< 7'
 
-  s.add_development_dependency 'bundler', '~> 1.16'
+  s.add_development_dependency 'bundler', '>= 1.16'
   s.add_development_dependency 'bundler-audit'
+  s.add_development_dependency 'coveralls'
   s.add_development_dependency 'dogstatsd-ruby'
   s.add_development_dependency 'git'
   s.add_development_dependency 'guard-rspec'
   s.add_development_dependency 'pry'
-  s.add_development_dependency 'rake', '~> 10.0'
-  s.add_development_dependency 'rspec', '~> 3.0'
+  s.add_development_dependency 'rails', '>= 5.2.3', '< 7'
+  s.add_development_dependency 'rake', '>= 10.0'
+  s.add_development_dependency 'rspec', '< 4', '>= 3.0'
   s.add_development_dependency 'rspec-collection_matchers'
   s.add_development_dependency 'rspec-its'
   s.add_development_dependency 'rubocop'
   s.add_development_dependency 'simplecov'
+  s.add_development_dependency 'sqlite3'
   s.add_development_dependency 'ws-style'
 
   # Required by activerecord-safer_migrations
-  s.add_development_dependency 'pg', '~> 0.21'
+  s.add_development_dependency 'pg', '>= 0.21'
   s.add_development_dependency 'strong_migrations'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pii_safe_schema
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.3.3
 platform: ruby
 authors:
 - Alexi Garrow
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-04-18 00:00:00.000000000 Z
+date: 2021-03-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -17,6 +17,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -24,6 +27,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
 - !ruby/object:Gem::Dependency
   name: colorize
   requirement: !ruby/object:Gem::Requirement
@@ -45,6 +51,9 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -52,18 +61,21 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '1.16'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '1.16'
 - !ruby/object:Gem::Dependency
@@ -80,6 +92,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: coveralls
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: dogstatsd-ruby
   requirement: !ruby/object:Gem::Requirement
@@ -136,32 +162,58 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 5.2.3
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 5.2.3
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '10.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '10.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4'
+    - - ">="
       - !ruby/object:Gem::Version
         version: '3.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4'
+    - - ">="
       - !ruby/object:Gem::Version
         version: '3.0'
 - !ruby/object:Gem::Dependency
@@ -220,6 +272,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: sqlite3
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: ws-style
   requirement: !ruby/object:Gem::Requirement
@@ -238,14 +304,14 @@ dependencies:
   name: pg
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0.21'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0.21'
 - !ruby/object:Gem::Dependency
@@ -282,9 +348,11 @@ files:
 - LICENSE
 - README.md
 - Rakefile
+- datadog_example.png
 - lib/pii_safe_schema.rb
 - lib/pii_safe_schema/annotations.rb
 - lib/pii_safe_schema/configuration.rb
+- lib/pii_safe_schema/invalid_column_error.rb
 - lib/pii_safe_schema/migration_generator.rb
 - lib/pii_safe_schema/notifiers/data_dog.rb
 - lib/pii_safe_schema/notifiers/std_out.rb
@@ -295,7 +363,8 @@ files:
 - lib/tasks/pii_safe_schema.rake
 - pii_safe_schema.gemspec
 homepage: https://github.com/wealthsimple/pii_safe_schema
-licenses: []
+licenses:
+- MIT
 metadata: {}
 post_install_message: 
 rdoc_options: []
@@ -305,14 +374,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.6'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.1
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: Schema migration tool for checking and adding comments on PII columns.