Skip to content

v0.1.1

Choose a tag to compare

@github-actions github-actions released this 14 Feb 13:22
· 48 commits to main since this release

Added

  • compare command — detect drift between two MongoDB clusters (staging vs prod)
  • Field-level query scanning — extract queried fields from Go, JS, Python code
  • UNINDEXED_QUERY finding — field queried in code with no covering index
  • SUGGEST_INDEX finding — recommend indexes for unindexed queried fields
  • SARIF output format (--format sarif) for GitHub Security tab integration
  • Config file support (.mongospectre.yml) with thresholds, exclusions, defaults
  • Ignore file (.mongospectreignore) for suppressing known-ok findings
  • Baseline diff (--baseline report.json) to show new/resolved/unchanged findings
  • Integration tests with testcontainers (make test-integration)
  • MONGODB_URI environment variable fallback for --uri flag
  • --timeout flag for connection and operation timeout
  • --verbose flag for detailed output
  • --no-ignore flag to bypass ignore file
  • Report metadata (version, command, timestamp, MongoDB version)
  • Mongoose model-to-collection pluralization in scanner

Fixed

  • golangci-lint v2 config compatibility (linters-settings → linters.settings, exclude-dirs → run.exclude-dirs)

Install

# macOS (Apple Silicon)
curl -LO https://github.com/ppiankov/mongospectre/releases/download/v0.1.1/mongospectre_0.1.1_darwin_arm64.tar.gz
tar -xzf mongospectre_0.1.1_darwin_arm64.tar.gz
sudo mv mongospectre /usr/local/bin/

# macOS (Intel)
curl -LO https://github.com/ppiankov/mongospectre/releases/download/v0.1.1/mongospectre_0.1.1_darwin_amd64.tar.gz
tar -xzf mongospectre_0.1.1_darwin_amd64.tar.gz
sudo mv mongospectre /usr/local/bin/

# Linux (amd64)
curl -LO https://github.com/ppiankov/mongospectre/releases/download/v0.1.1/mongospectre_0.1.1_linux_amd64.tar.gz
tar -xzf mongospectre_0.1.1_linux_amd64.tar.gz
sudo mv mongospectre /usr/local/bin/

Verify checksums: sha256sum -c checksums.txt