Merge pull request #30 from rollandf/third-party

chore: license check and base image

Author: almaslennikov

.github/workflows/license-check.yml

@@ -0,0 +1,10 @@
+name: License Check
+
+on:
+  pull_request:
+  push:
+    branches: [main, master]
+
+jobs:
+  call-license-check:
+    uses: Mellanox/cloud-orchestration-reusable-workflows/.github/workflows/license-check-reusable.yml@main

CONTRIBUTING.md

@@ -0,0 +1,78 @@
+# How to Contribute
+
+network-operator-init-container is [Apache 2.0 licensed](LICENSE) and accepts contributions via GitHub
+pull requests. This document outlines some of the conventions on development
+workflow, commit message formatting, contact points and other resources to make
+it easier to get your contribution accepted.
+
+## Issue Tracking
+
+* All enhancement, bugfix, or change requests must begin with the creation of a [Issue Request](https://github.com/Mellanox/network-operator-init-container/issues).
+
+
+## Coding Style
+
+Please follows the standard formatting recommendations and language idioms set out
+in [Effective Go](https://golang.org/doc/effective_go.html) and in the
+[Go Code Review Comments wiki](https://github.com/golang/go/wiki/CodeReviewComments).
+
+
+## Signing Your Work
+
+* We require that all contributors "sign-off" on their commits. This certifies that the contribution is your original work, or you have rights to submit it under the same license, or a compatible license.
+
+  * Any contribution which contains commits that are not Signed-Off will not be accepted.
+
+* To sign off on a commit you simply use the `--signoff` (or `-s`) option when committing your changes:
+  ```bash
+  $ git commit -s -m "Add cool feature."
+  ```
+  This will append the following to your commit message:
+  ```
+  Signed-off-by: Your Name <[email protected]>
+  ```
+
+* Full text of the DCO:
+
+  ```
+    Developer Certificate of Origin
+    Version 1.1
+    
+    Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
+    1 Letterman Drive
+    Suite D4700
+    San Francisco, CA, 94129
+    
+    Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
+  ```
+
+  ```
+    Developer's Certificate of Origin 1.1
+    
+    By making a contribution to this project, I certify that:
+    
+    (a) The contribution was created in whole or in part by me and I have the right to submit it under the open source license indicated in the file; or
+    
+    (b) The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate open source license and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same open source license (unless I am permitted to submit under a different license), as indicated in the file; or
+    
+    (c) The contribution was provided directly to me by some other person who certified (a), (b) or (c) and I have not modified it.
+    
+    (d) I understand and agree that this project and the contribution are public and that a record of the contribution (including all personal information I submit with it, including my sign-off) is maintained indefinitely and may be redistributed consistent with this project or the open source license(s) involved.
+  ```
+
+## Format of the patch
+
+Beside the signed-off-by footer, we expect each patch to comply with the following format:
+
+```
+Change summary
+
+More detailed explanation of your changes: Why and how.
+Wrap it to 72 characters.
+
+Signed-off-by: <[email protected]>
+```
+
+## Format of PR title and description
+
+Pull Request title and description are expected to conform to [conventional commits specification](https://www.conventionalcommits.org)

Dockerfile

@@ -1,3 +1,19 @@
+# Copyright 2025 NVIDIA CORPORATION & AFFILIATES
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 # Build the image
 FROM golang:1.24 as builder
 
@@ -15,10 +31,11 @@ COPY . /workspace
 # Build with make to apply all build logic defined in Makefile
 RUN make build
 
-# Use distroless as minimal base image to package the manager binary
-# Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM gcr.io/distroless/static:nonroot
+FROM nvcr.io/nvidia/distroless/go:v3.1.8
 WORKDIR /
 COPY --from=builder /workspace/build/network-operator-init-container .
 
+# Provide the source code and license in the container
+COPY --from=builder /workspace /src
+
 ENTRYPOINT [ "/network-operator-init-container" ]

Makefile

@@ -1,6 +1,9 @@
 # Version information
 include Makefile.version
 
+# License targets
+include license.mk
+
 SHELL = /usr/bin/env bash -o pipefail
 .SHELLFLAGS = -ec