Change cuda.core license to Apache-2.0 & make contributing guides clear (#583)

* change cuda-core license & make contributing guides clear

* various fixes

* fix

* apply SPDX header to rst files; per-module CoC

* toolshed needs update too

* miss checking in one file

* more spdx identifiers

Author: leofang

.bandit

@@ -1,2 +1,4 @@
+# SPDX-License-Identifier: Apache-2.0
+
 [bandit]
 skips = B101,B311

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 name: Bug Report
 description: Create a report to help us improve
 title: '[BUG]: '

.github/ISSUE_TEMPLATE/config.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 blank_issues_enabled: true
 contact_links:
   - name: Questions

.github/ISSUE_TEMPLATE/doc_request.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 name: Documentation Request
 description: Suggest an idea to improve cuda-python
 title: '[DOC]: '

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 name: Feature Request
 description: Suggest an idea to improve cuda-python
 title: '[FEA]: '

.github/ISSUE_TEMPLATE/release_checklist.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 name: Release Checklist
 description: Public checklist for release managers making a subpackage release
 labels: ["P0"]

.github/actions/doc_preview/action.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 name: Preview or clean up docs built from PRs
 
 # A re-implementation based on the logic of https://github.com/rossjrw/pr-preview-action/blob/41a957c44a456a34718e9bcf825363194db5e6d5/README.md, due to limitations illustrated in NVIDIA/cuda-python#380.

.github/actions/fetch_ctk/action.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 name: Fetch mini CTK
 
 description: Fetch (or create) a mini CUDA Toolkit from cache

.github/actions/get_pr_number/action.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 name: Get the PR number
 
 description: Get the PR number without relying on the pull_request* event triggers.

.github/actions/install_unix_deps/action.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2024-2025, NVIDIA CORPORATION & AFFILIATES. ALL RIGHTS RESERVED.
+#
+# SPDX-License-Identifier: Apache-2.0
+
 name: Install dependencies on Ubuntu
 
 description: Install needed dependencies, regardless if using GitHub- or self- hosted runners, container, sudo or not.