feat: add license check (#527)

Signed-off-by: Oleksii Orel <oorel@redhat.com>

Author: olexii4

.github/workflows/pull-request-check-licenses.yml

@@ -0,0 +1,61 @@
+#
+# Copyright (c) 2021-2025 Red Hat, Inc.
+# This program and the accompanying materials are made
+# available under the terms of the Eclipse Public License 2.0
+# which is available at https://www.eclipse.org/legal/epl-2.0/
+#
+# SPDX-License-Identifier: EPL-2.0
+#
+
+name: License Check
+
+# Trigger the workflow on pull request
+on: [pull_request]
+
+jobs:
+  check-che-extensions-licenses:
+    runs-on: ubuntu-22.04
+    if: ${{ github.base_ref == 'main' }}
+    steps:
+      - name: Checkout che-code source code
+        uses: actions/checkout@v4
+      - name: Check che-activity-tracker dependencies usage restrictions
+        run: |
+          docker run --rm -t \
+            -v $PWD/code/extensions/che-activity-tracker:/workspace/project \
+            quay.io/che-incubator/dash-licenses:next --check
+      - name: Check che-api dependencies usage restrictions
+        run: |
+          docker run --rm -t \
+            -v $PWD/code/extensions/che-api:/workspace/project \
+            quay.io/che-incubator/dash-licenses:next --check
+      - name: Check che-commands dependencies usage restrictions
+        run: |
+          docker run --rm -t \
+            -v $PWD/code/extensions/che-commands:/workspace/project \
+            quay.io/che-incubator/dash-licenses:next --check
+      - name: Check che-github-authentication dependencies usage restrictions
+        run: |
+          docker run --rm -t \
+            -v $PWD/code/extensions/che-github-authentication:/workspace/project \
+            quay.io/che-incubator/dash-licenses:next --check
+      - name: Check che-port dependencies usage restrictions
+        run: |
+          docker run --rm -t \
+            -v $PWD/code/extensions/che-port:/workspace/project \
+            quay.io/che-incubator/dash-licenses:next --check
+      - name: Check che-remote dependencies usage restrictions
+        run: |
+          docker run --rm -t \
+            -v $PWD/code/extensions/che-remote:/workspace/project \
+            quay.io/che-incubator/dash-licenses:next --check
+      - name: Check che-resource-monitor dependencies usage restrictions
+        run: |
+          docker run --rm -t \
+            -v $PWD/code/extensions/che-resource-monitor:/workspace/project \
+            quay.io/che-incubator/dash-licenses:next --check
+      - name: Check che-terminal dependencies usage restrictions
+        run: |
+          docker run --rm -t \
+            -v $PWD/code/extensions/che-terminal:/workspace/project \
+            quay.io/che-incubator/dash-licenses:next --check          

README.md

@@ -86,6 +86,32 @@ For a main branch:
 $ git diff upstream-code/main main:code
 ```
 
+## License Check for Eclipse Che extensions
+License check tools work for the next extensions:
+1. `che-activity-tracker`
+2. `che-api`
+3. `che-commands`
+4. `che-github-authentication`
+5. `che-port`
+6. `che-remote`
+7. `che-resource-monitor`
+8. `che-terminal`
+
+Dependencies usage restrictions could be checked with the `license:check` command. Example for `che-api`:
+
+```bash
+$ npm --prefix code/extensions/che-api run license:generate
+```
+This command will check the dependencies used in the `che-api` extension and generate a report with the following files:
+ - `prod.md` with the list of production dependencies;
+ - `dev.md` which contains only build and test dependencies;
+ - `problems.md` will be created if some dependencies are not covered with the referenced IP request(CQ).
+
+These files wil be in the `code/extensions/che-api/.deps` directory.
+
+**Note**: Detailed information on how to create the required CQs with
+         [clearlydefined](https://clearlydefined.io/) can be found [here](https://docs.clearlydefined.io/docs/get-involved/adding-sources).
+
 ## Fixing the [`rebase-insiders`](https://github.com/che-incubator/che-code/actions/workflows/rebase-insiders.yml) Workflow?
 Upstream VS Code changes may bring a breakage to Che-Code. In this case, the [`rebase-insiders`](https://github.com/che-incubator/che-code/actions/workflows/rebase-insiders.yml) Workflow run is failed. To fix it, follow the steps below:
 1. Checkout to a new branch, e.g.`fix-rebase`.

code/extensions/che-activity-tracker/.deps/EXCLUDED/dev.md

@@ -0,0 +1,4 @@
+This file contains a manual contribution to .deps/dev.md and it's needed because eclipse/dash-licenses does not deal with work-with CQs (more see https://github.com/eclipse/dash-licenses/issues/13)
+
+| Packages | Resolved CQs |
+| --- | --- |

code/extensions/che-activity-tracker/.deps/EXCLUDED/prod.md

@@ -0,0 +1,5 @@
+This file lists dependencies that do not need CQs or auto-detection does not work due to a bug in https://github.com/eclipse/dash-licenses
+
+| Packages | Resolved CQs |
+| --- | --- |
+