⭐️ add documentation for cnquery (#6412)

* ⭐️ add documentation for cnquery

* 🧹 update spellcheck

Author: chris-rock

.github/actions/spelling/expect.txt

@@ -22,6 +22,7 @@ Clusterwide
 cmek
 cpe
 cryptokey
+cyclonedx
 CUSTOMERID
 customresources
 datapath
@@ -37,6 +38,8 @@ eip
 ekm
 elbv
 exo
+frontmatter
+fumadocs
 gcfs
 gcs
 geomatchstatement
@@ -66,6 +69,7 @@ lfs
 Lightbox
 liveanalytics
 loggingservice
+lsp
 manageddevice
 managedrulegroupstatement
 managedzone
@@ -108,6 +112,9 @@ rtsp
 rulegroup
 rulegroupreferencestatement
 saas
+sbom
+SECRETID
+SECRETVALUE
 Sas
 scim
 scm
@@ -132,6 +139,7 @@ toplevel
 tpu
 udid
 usb
+VAULTNAME
 vdcs
 virtualmachine
 Vtpm

docs/images/Grafana-dashboard.png .github/images/Grafana-dashboard.pngdocs/images/Grafana-dashboard.png renamed to .github/images/Grafana-dashboard.png

@@ -369,7 +369,7 @@ When debugging `cnquery`, you can monitor and profile memory and CPU usage using
 
 You should start seeing data in Grafana!
 
-![Grafana_dashboard](images/Grafana-dashboard.png)
+![Grafana_dashboard](.github/images/Grafana-dashboard.png)
 
 ## Contribute changes
 

docs/images/cnquery-dark.svg .github/images/cnquery-dark.svgdocs/images/cnquery-dark.svg renamed to .github/images/cnquery-dark.svg

@@ -1,13 +1,13 @@
 # cnquery
 
-![cnquery light-mode logo](docs/images/cnquery-light.svg#gh-light-mode-only)
-![cnquery dark-mode logo](docs/images/cnquery-dark.svg#gh-dark-mode-only)
+![cnquery light-mode logo](.github/images/cnquery-light.svg#gh-light-mode-only)
+![cnquery dark-mode logo](.github/images/cnquery-dark.svg#gh-dark-mode-only)
 
 **Open source, cloud-native asset inventory and discovery**
 
 cnquery is a cloud-native tool for querying your entire infrastructure. Built upon Mondoo's security data fabric, it answers thousands of questions about your infrastructure and integrates with over 850 resources across cloud accounts, Kubernetes, containers, services, VMs, APIs, and more.
 
-![cnquery run example](docs/images/cnquery-run.gif)
+![cnquery run example](.github/images/cnquery-run.gif)
 
 Here are a few more examples:
 
@@ -112,7 +112,7 @@ cnquery scan -f examples/example-os.mql.yaml
 
 Like all other commands, you can specify different providers like `k8s`, `aws`, `docker`, and many more. Run `--help` to see the full list of supported providers.
 
-![cnquery scan example](docs/images/cnquery-scan.gif)
+![cnquery scan example](.github/images/cnquery-scan.gif)
 
 These files can also contain multiple query packs for many different target systems.
 

docs/images/cnquery-light.svg .github/images/cnquery-light.svgdocs/images/cnquery-light.svg renamed to .github/images/cnquery-light.svg

@@ -0,0 +1,91 @@
+# Contributing to cnquery Documentation
+
+This folder contains the user-facing documentation for cnquery. The content is synced to the [Mondoo docs site](https://mondoo.com/docs/cnquery/).
+
+## How the sync works
+
+The cnquery docs live in this open source repo but are published on mondoo.com/docs. A GitHub Action in the docs repo syncs the content:
+
+1. **Source**: This folder (`cnquery/docs/`)
+2. **Destination**: `docs/content/cnquery/` in the private docs repo
+3. **Trigger**: Daily at 6 AM UTC or manual dispatch
+
+### What gets synced
+
+- All `.mdx` files (documentation content)
+- CLI reference files in `cli/` folder (auto-generated)
+
+### What stays in the docs repo only
+
+- `meta.json` files (fumadocs navigation configuration)
+- Images in `public/img/cnquery/`
+
+The sync workflow backs up and restores `meta.json` files to preserve navigation structure.
+
+## Writing documentation
+
+### File format
+
+- Use `.mdx` extension for all documentation files
+- CLI reference files in `cli/` use `.md` (auto-generated)
+
+### Frontmatter
+
+Each file needs frontmatter with at least:
+
+```yaml
+---
+title: Page Title
+sidebar_label: Short Label
+displayed_sidebar: cnquery
+description: Brief description for SEO
+image: /img/cnquery/mondoo-feature.jpg
+---
+```
+
+### Images
+
+Images are stored in the docs repo at `public/img/cnquery/`. Reference them with absolute paths:
+
+```markdown
+![Alt text](/img/cnquery/folder/image.png)
+```
+
+Available image folders:
+- `/img/cnquery/` - Featured images, banners
+- `/img/cnquery/github/` - GitHub app setup screenshots
+- `/img/cnquery/gw/` - Google Workspace screenshots
+- `/img/cnquery/m365/` - Microsoft 365 screenshots
+
+### Links
+
+Use absolute paths for links:
+```markdown
+[MQL Reference](/mql/resources/)
+[Other cnquery page](/cnquery/cnquery-about/)
+```
+
+## Adding new images
+
+If you need new images:
+
+1. Add the image to the docs repo at `public/img/cnquery/`
+2. Reference it in your markdown with the absolute path
+3. The image will be available after the docs repo change is merged
+
+## Folder structure
+
+```
+docs/
+├── cli/                 # Auto-generated CLI reference (do not edit)
+├── cloud/               # Cloud provider docs (AWS, Azure, GCP, etc.)
+│   ├── aws/
+│   ├── k8s/
+│   └── ...
+├── os/                  # Operating system docs
+├── saas/                # SaaS integration docs (GitHub, M365, etc.)
+├── index.mdx            # cnquery docs home page
+├── cnquery-about.mdx    # What is cnquery
+├── providers.mdx        # Provider installation
+└── CONTRIBUTING.md      # This file
+```

docs/images/cnquery-run.gif .github/images/cnquery-run.gifdocs/images/cnquery-run.gif renamed to .github/images/cnquery-run.gif

@@ -0,0 +1,114 @@
+---
+title: Get Started with cnquery
+id: cnquery-get-started
+sidebar_label: Get Started with cnquery
+displayed_sidebar: cnquery
+sidebar_position: 2
+description: cnquery is Mondoo's open source, cloud-native tool that answers every question about your infrastructure. Install, and get up and running with cnquery.
+image: /img/cnquery/mondoo-feature.jpg
+---
+
+Welcome to cnquery, an open source project created by [Mondoo](https://mondoo.com)!
+
+-> [Learn about cnquery](/cnquery/cnquery-about)
+
+## Download and install cnquery​
+
+Install cnquery with our installation script:
+
+### Linux and macOS
+
+```bash
+bash -c "$(curl -sSL https://install.mondoo.com/sh)"
+```
+
+(You can read the [Linux/macOS installation script](https://install.mondoo.com/sh).)
+
+### Windows
+
+```powershell
+Set-ExecutionPolicy Unrestricted -Scope Process -Force;
+[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072;
+iex ((New-Object System.Net.WebClient).DownloadString('https://install.mondoo.com/ps1/cnquery'));
+Install-Mondoo -Product cnquery;
+```
+
+(You can read the [Windows installation script](https://install.mondoo.com/ps1/cnquery).)
+
+### Install manually
+
+Manual installation packages are available on [GitHub releases](https://github.com/mondoohq/cnquery/releases/latest).
+
+<Callout>
+If you install cnquery on machines that can't download and install updates (because they're air-gapped or don't give cnquery write access), you must install cnquery providers. To learn more, read [Manage cnquery Providers](/cnquery/providers/).
+</Callout>
+## Run queries in the cnquery shell​
+
+The easiest way to discover cnquery's capabilities is to use the interactive shell, which has auto-complete to guide you:
+
+```bash
+cnquery shell
+```
+
+Once inside the shell, you can enter MQL queries. For example, this query returns the name of the current machine and the platform it's running:
+
+```bash
+asset { name title }
+```
+
+### Get help in the cnquery shell​
+
+To see what information cnquery can retrieve, use the `help` command. These are some examples of how the help can guide you:
+
+| This command...        | Describes the queryable resources for... |
+| ---------------------- | ---------------------------------------- |
+| `help`                 | All of cnquery                           |
+| `help k8s`             | Kubernetes                               |
+| `help k8s.statefulset` | Kubernetes Cluster StatefulSets          |
+| `help azure`           | Azure                                    |
+| `help terraform`       | Terraform                                |
+
+### Exit the cnquery shell​
+
+To exit cnquery shell, either press `Ctrl + D` or type `exit`.
+
+## Run queries in your own shell​
+
+To run standalone queries in your shell, use the cnquery run command:
+
+```bash
+cnquery run TARGET -c "QUERY"
+```
+
+| For...   | Substitute...                                                           |
+| -------- | ----------------------------------------------------------------------- |
+| `TARGET` | The asset to query, such as `local` or a transport to a remote machine. |
+| `QUERY`  | The MQL query that specifies the information you want.                  |
+
+For example, this command runs a query against your local system. It lists the services installed and whether each service is running:
+
+```bash
+cnquery run local -c "services.list { name running }"
+```
+
+For a list of supported targets, use the help command:
+
+```bash
+cnquery help run
+```
+
+## Explore your infrastructure in Mondoo Platform​
+
+To more easily explore your infrastructure, sign up for a Mondoo Platform account. Mondoo's web-based console allows you to navigate, search, and inspect all of your assets.
+
+To get started, [contact Mondoo](https://mondoo.com/contact).
+
+To learn about Mondoo Platform, read the [Mondoo Platform docs](../platform/home) or visit [mondoo.com](https://mondoo.com).
+
+## Learn more​
+
+- To explore cnquery commands, read [CLI Reference](/cnquery/cli/cnquery).
+- To explore the capabilities of the MQL language, read the [MQL docs](/mql/resources).
+- To learn what technologies cnquery integrates with, read [Supported Query Targets](/cnquery/cnquery-supported).
+
+---