⭐ Add provider ipinfo (#6176)

Author: Bajusz15

.github/actions/spelling/excludes.txt

@@ -83,3 +83,4 @@
 ^\.github/workflows/.*\.yaml
 _release_template_file.md
 ignore$
+ipinfo

Makefile

@@ -198,6 +198,7 @@ providers/build: \
 	providers/build/network \
 	providers/build/os \
 	providers/build/ipmi \
+	providers/build/ipinfo \
 	providers/build/oci \
 	providers/build/slack \
 	providers/build/github \
@@ -231,6 +232,7 @@ providers/install: \
 	providers/install/network \
 	providers/install/os \
 	providers/install/ipmi \
+	providers/install/ipinfo \
 	providers/install/oci \
 	providers/install/slack \
 	providers/install/github \
@@ -409,10 +411,16 @@ providers/build/tailscale: providers/lr
 providers/install/tailscale:
 	@$(call installProvider, providers/tailscale)
 
+providers/build/ipinfo: providers/lr
+	@$(call buildProvider, providers/ipinfo)
+providers/install/ipinfo:
+	@$(call installProvider, providers/ipinfo)
+
 providers/dist:
 	@$(call buildProviderDist, providers/network)
 	@$(call buildProviderDist, providers/os)
 	@$(call buildProviderDist, providers/ipmi)
+	@$(call buildProviderDist, providers/ipinfo)
 	@$(call buildProviderDist, providers/oci)
 	@$(call buildProviderDist, providers/slack)
 	@$(call buildProviderDist, providers/github)
@@ -443,6 +451,7 @@ providers/bundle:
 	@$(call bundleProvider, providers/network)
 	@$(call bundleProvider, providers/os)
 	@$(call bundleProvider, providers/ipmi)
+	@$(call bundleProvider, providers/ipinfo)
 	@$(call bundleProvider, providers/oci)
 	@$(call bundleProvider, providers/slack)
 	@$(call bundleProvider, providers/github)
@@ -474,6 +483,7 @@ providers/test:
 	@$(call testProvider, providers/network)
 	@$(call testProvider, providers/os)
 	@$(call testGoModProvider, providers/ipmi)
+	@$(call testGoModProvider, providers/ipinfo)
 	@$(call testGoModProvider, providers/oci)
 	@$(call testGoModProvider, providers/slack)
 	@$(call testGoModProvider, providers/github)
@@ -582,6 +592,11 @@ lr/docs/markdown: providers/lr
 		--description "The IPMI resource pack lets you use MQL to query and assess the security of your IPMI devices." \
 		--docs-file providers/ipmi/resources/ipmi.lr.manifest.yaml \
 		--output ../docs/docs/mql/resources/ipmi-pack
+	./lr markdown providers/ipinfo/resources/ipinfo.lr \
+		--pack-name "IPinfo" \
+		--description "The IPinfo resource pack lets you use MQL to query IP address information from ipinfo.io." \
+		--docs-file providers/ipinfo/resources/ipinfo.lr.manifest.yaml \
+		--output ../docs/docs/mql/resources/ipinfo-pack
 	./lr markdown providers/k8s/resources/k8s.lr \
 		--pack-name "Kubernetes (K8s)" \
 		--description "The Kubernetes resource pack lets you use MQL to query and assess the security of your Kubernetes clusters and workloads." \

providers/defaults.go

@@ -552,4 +552,18 @@ var DefaultProviders Providers = map[string]*Provider{
 			},
 		},
 	},
+	"ipinfo": {
+		Provider: &plugin.Provider{
+			Name:            "ipinfo",
+			ID:              "go.mondoo.com/cnquery/providers/ipinfo",
+			ConnectionTypes: []string{"ipinfo"},
+			Connectors: []plugin.Connector{
+				{
+					Name:  "ipinfo",
+					Use:   "ipinfo",
+					Short: "Query ipinfo.io for IP address information",
+				},
+			},
+		},
+	},
 }

providers/ipinfo/README.md

@@ -0,0 +1,58 @@
+# IPinfo Provider
+
+```shell
+cnquery shell ipinfo
+```
+
+For authentication, you can use the `IPINFO_TOKEN` environment variable.
+
+```shell
+export IPINFO_TOKEN="<token>"
+```
+
+## Examples
+
+**Query IP information**
+
+Query information for a specific IP address.
+
+```shell
+cnquery> ipinfo(ip("8.8.8.8")) { * }
+ipinfo: {
+  requested_ip: "8.8.8.8"
+  returned_ip: "8.8.8.8"
+  hostname: "dns.google"
+  bogon: false
+}
+```
+
+**Query your public IP**
+
+Query information for your machine's public IP address.
+
+```shell
+cnquery> ipinfo() { * }
+ipinfo: {
+  requested_ip: null
+  returned_ip: "<your-public-ip>"
+  hostname: "<hostname>"
+  bogon: false
+}
+```
+
+**Query IP information from network interfaces**
+
+Query IP information for all IPs from network interfaces.
+
+```shell
+cnquery run -c "network.interfaces.map(ips.map(_.ip)).flat.map(ipinfo(_){*})"
+network.interfaces.map.flat.map: [
+  0: {
+    returned_ip: 127.0.0.1
+    hostname: ""
+    bogon: true
+    requested_ip: 127.0.0.1
+  }
+  ......
+
+```

providers/ipinfo/config/config.go

@@ -0,0 +1,39 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
+package config
+
+import (
+	"go.mondoo.com/cnquery/v12/providers-sdk/v1/plugin"
+	"go.mondoo.com/cnquery/v12/providers/ipinfo/provider"
+)
+
+var Config = plugin.Provider{
+	Name:            "ipinfo",
+	ID:              "go.mondoo.com/cnquery/providers/ipinfo",
+	Version:         "12.10.0",
+	ConnectionTypes: []string{provider.DefaultConnectionType},
+	Connectors: []plugin.Connector{
+		{
+			Name:  "ipinfo",
+			Use:   "ipinfo",
+			Short: "Query ipinfo.io for IP address information",
+			Long: `Use the ipinfo provider to query IP address information from ipinfo.io, including the IP address, hostname, and whether the IP address is a bogon.
+
+Examples:
+  cnquery shell ipinfo
+  cnquery run ipinfo -c "ipinfo(ip('8.8.8.8')){*}"
+  cnquery run ipinfo -c "ipinfo(){*}"  # Query your public IP"
+  cnquery run -c "network.interfaces.map(ips.map(_.ip)).flat.map(ipinfo(_){*})"
+
+Notes:
+  - Pass an IP address to query information about that specific IP: ipinfo(ip("1.1.1.1"))
+  - Pass no arguments (empty IP) to query your machine's public IP: ipinfo()
+  - The bogon field indicates whether the returned IP is a private, link-local, or otherwise non-routable address. When bogon is true, the returned IP is the same as the requested IP.
+  - Set IPINFO_TOKEN environment variable to use the authenticated ipinfo.io API.
+`,
+			Discovery: []string{},
+			Flags:     []plugin.Flag{},
+		},
+	},
+}

providers/ipinfo/connection/connection.go

@@ -0,0 +1,51 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
+package connection
+
+import (
+	"os"
+
+	"go.mondoo.com/cnquery/v12/providers-sdk/v1/inventory"
+	"go.mondoo.com/cnquery/v12/providers-sdk/v1/plugin"
+)
+
+type IpinfoConnection struct {
+	plugin.Connection
+	Conf   *inventory.Config
+	asset  *inventory.Asset
+	token  string
+	client interface{} // ipinfo client will be stored here
+}
+
+func NewIpinfoConnection(id uint32, asset *inventory.Asset, conf *inventory.Config) (*IpinfoConnection, error) {
+	conn := &IpinfoConnection{
+		Connection: plugin.NewConnection(id, asset),
+		Conf:       conf,
+		asset:      asset,
+	}
+
+	conn.token = os.Getenv("IPINFO_TOKEN")
+
+	return conn, nil
+}
+
+func (c *IpinfoConnection) Name() string {
+	return "ipinfo"
+}
+
+func (c *IpinfoConnection) Asset() *inventory.Asset {
+	return c.asset
+}
+
+func (c *IpinfoConnection) Client() interface{} {
+	return c.client
+}
+
+func (c *IpinfoConnection) SetClient(client interface{}) {
+	c.client = client
+}
+
+func (c *IpinfoConnection) Token() string {
+	return c.token
+}

providers/ipinfo/gen/main.go

@@ -0,0 +1,13 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
+package main
+
+import (
+	"go.mondoo.com/cnquery/v12/providers-sdk/v1/plugin/gen"
+	"go.mondoo.com/cnquery/v12/providers/ipinfo/config"
+)
+
+func main() {
+	gen.CLI(&config.Config)
+}