Minor changes

- updated gfx README
- added some missing license header

Author: de-jcup

.github/workflows/ci.yml

@@ -22,7 +22,35 @@ jobs:
         node-version: '10'
     - run: npm install
     # https://code.visualstudio.com/api/working-with-extensions/continuous-integration#github-actions
+
     - run: xvfb-run -a npm test
       if: runner.os == 'Linux'
     - run: npm test
       if: runner.os != 'Linux'
+    
+    - name: Fetch version from package.json
+      id: version
+      uses: notiz-dev/github-action-json-property@release
+      with: 
+          path: 'package.json'
+          prop_path: 'version'
+    
+    - name: "Show version: v${{ steps.version.outputs.prop }}"
+      run: echo v${{ steps.version.outputs.prop }}
+    
+    # - name: License check
+    #   uses: blackducksoftware/github-action@2.0.1
+    #   env:
+    #       SYNOPSYS_SKIP_PHONE_HOME: true
+    #   with:
+    #       args: |
+    #        '--blackduck.url="${{ secrets.BLACKDUCK_URL}}"  \
+    #        --detect.project.name="${{ secrets.BLACKDUCK_PROJECT_NAME }}" \
+    #        --detect.npm.include.dev.dependencies=false \
+    #        --blackduck.api.token="${{ secrets.BLACKDUCK_API_TOKEN }}-ci" \
+    #        --detect.excluded.detector.types=GIT \
+    #        --detect.policy.check.fail.on.severities=CRITICAL \
+    #        --detect.project.version.name="${{ steps.version.outputs.prop }}" \
+    #        --detect.detector.search.depth=3 \
+    #        --detect.blackduck.signature.scanner.exclusion.name.pattern=.git,node_modules,.vscode-test \
+    #        '

3RD_PARTY_LICENSES.txt

@@ -0,0 +1,11 @@
+Copyright 2021
+
+[sechub-plugin-vscode : 0.1.0]
+
+Phase: RELEASED
+Distribution: OPENSOURCE
+
+Components: 
+
+
+Licenses: 

CHANGELOG.md

@@ -1,9 +1,14 @@
+<!-- SPDX-License-Identifier: MIT --->
 # Change Log
 
 All notable changes to the "sechub-plugin-vscode" extension will be documented in this file.
 
 Check [Keep a Changelog](http://keepachangelog.com/) for recommendations on how to structure this file.
 
-## [Unreleased]
+## [0.1.0]
+- Initial release
+- User has possibility to load existing SecHub report from local file system.
+- Loaded reports can be crawled and editor will show up when source is available
+- If CWE information is available a link is provided in details
 
-- Initial release
+## [Unreleased]

SECURITY.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT --->
 It is Daimler’s goal to offer its customers the best and most secure products such as connected cars and other services. Daimler values the work of security researchers and whitehat hackers who spend time and effort helping us to achieve this goal.
 
 For further Information please visit our [Vulnerability Reporting Policy](https://www.daimler.com/whitehat/).

media/README.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT --->
 ## About
 
 Here some icons are stored being used inside plugin. If some of the icons are from external then the location, the author and the license will be mentioned.
@@ -6,7 +7,7 @@ Here some icons are stored being used inside plugin. If some of the icons are fr
 `if_advantage_protection_1034363.svg`
 `if_advantage_protection_1034363.png`
 
-(stored as sechub-logo.svg)
+(stored as sechub-logo.svg, also as sechub-logo-big.png)
 
 Link: <https://www.iconfinder.com/icons/1034363/advantage_protect_protection_security_shield_icon#size=128>
 

media/material-io/README.md

@@ -1,3 +1,4 @@
+<!-- SPDX-License-Identifier: MIT --->
 ## About
 
 This folder contains some icons from material design - which are available under Apache license version 2.0.