From dd6383523f461046c37be43834e54778da1e892d Mon Sep 17 00:00:00 2001 From: Sascha Steinbiss Date: Thu, 20 Nov 2025 12:31:40 +0100 Subject: [PATCH 1/2] fix: do not log MongoDB passwords Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- db/slurper_mongodb.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/db/slurper_mongodb.go b/db/slurper_mongodb.go index 1b2bfc5..bf56df0 100644 --- a/db/slurper_mongodb.go +++ b/db/slurper_mongodb.go @@ -262,7 +262,11 @@ func MakeMongoSlurper(host string, database string, user string, password string s.TypeDispatch[t] = make(chan types.Entry, 1000) } url := fmt.Sprintf("mongodb://%s:%s@%s/%s", s.User, s.Password, s.Host, s.Database) - s.Logger.WithFields(log.Fields{"url": url}).Info("preparing for MongoDB connection") + s.Logger.WithFields(log.Fields{ + "host": s.Host, + "database": s.Database, + "user": s.User, + }).Info("preparing for MongoDB connection") return s } From 954835b560998b6a8e2642c11a4364307cbcdd5b Mon Sep 17 00:00:00 2001 From: Sascha Steinbiss Date: Thu, 20 Nov 2025 12:35:20 +0100 Subject: [PATCH 2/2] fix: remove unused variable --- db/slurper_mongodb.go | 1 - 1 file changed, 1 deletion(-) diff --git a/db/slurper_mongodb.go b/db/slurper_mongodb.go index bf56df0..0f7f5e2 100644 --- a/db/slurper_mongodb.go +++ b/db/slurper_mongodb.go @@ -261,7 +261,6 @@ func MakeMongoSlurper(host string, database string, user string, password string for _, t := range TYPES { s.TypeDispatch[t] = make(chan types.Entry, 1000) } - url := fmt.Sprintf("mongodb://%s:%s@%s/%s", s.User, s.Password, s.Host, s.Database) s.Logger.WithFields(log.Fields{ "host": s.Host, "database": s.Database,