Add NOTICE and copyright/license snippet

NOTICE

@@ -0,0 +1,5 @@
+CycloneDX GitHub Action for Node.js
+Copyright (c) Patrick Dwyer
+
+This product includes software developed by the
+CycloneDX community (https://cyclonedx.org/).

index.js

@@ -1,3 +1,20 @@
+// This file is part of CycloneDX GitHub Action for Node.js
+//
+// Licensed under the Apache License, Version 2.0 (the “License”);
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//   http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an “AS IS” BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) Patrick Dwyer. All Rights Reserved.
+
 const fs = require('fs');
 const core = require('@actions/core');
 const execSync = require('child_process').execSync;