Repository navigation
v0.1.1
Added
comparecommand — detect drift between two MongoDB clusters (staging vs prod)- Field-level query scanning — extract queried fields from Go, JS, Python code
UNINDEXED_QUERYfinding — field queried in code with no covering indexSUGGEST_INDEXfinding — recommend indexes for unindexed queried fields- SARIF output format (
--format sarif) for GitHub Security tab integration - Config file support (
.mongospectre.yml) with thresholds, exclusions, defaults - Ignore file (
.mongospectreignore) for suppressing known-ok findings - Baseline diff (
--baseline report.json) to show new/resolved/unchanged findings - Integration tests with testcontainers (
make test-integration) MONGODB_URIenvironment variable fallback for--uriflag--timeoutflag for connection and operation timeout--verboseflag for detailed output--no-ignoreflag to bypass ignore file- Report metadata (version, command, timestamp, MongoDB version)
- Mongoose model-to-collection pluralization in scanner
Fixed
- golangci-lint v2 config compatibility (
linters-settings→linters.settings,exclude-dirs→run.exclude-dirs)
Install
# macOS (Apple Silicon)
curl -LO https://github.com/ppiankov/mongospectre/releases/download/v0.1.1/mongospectre_0.1.1_darwin_arm64.tar.gz
tar -xzf mongospectre_0.1.1_darwin_arm64.tar.gz
sudo mv mongospectre /usr/local/bin/
# macOS (Intel)
curl -LO https://github.com/ppiankov/mongospectre/releases/download/v0.1.1/mongospectre_0.1.1_darwin_amd64.tar.gz
tar -xzf mongospectre_0.1.1_darwin_amd64.tar.gz
sudo mv mongospectre /usr/local/bin/
# Linux (amd64)
curl -LO https://github.com/ppiankov/mongospectre/releases/download/v0.1.1/mongospectre_0.1.1_linux_amd64.tar.gz
tar -xzf mongospectre_0.1.1_linux_amd64.tar.gz
sudo mv mongospectre /usr/local/bin/Verify checksums: sha256sum -c checksums.txt