diff --git a/Dockerfile b/Dockerfile
index fcedeab..b30a984 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,3 +1,16 @@
+#   Copyright Docker attest-provider authors
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
 ARG BUILDERIMAGE="golang:1.22"
 ARG BASEIMAGE="gcr.io/distroless/static:nonroot"
 
diff --git a/Makefile b/Makefile
index 5523a2c..8954a11 100644
--- a/Makefile
+++ b/Makefile
@@ -1,3 +1,16 @@
+#   Copyright Docker attest-provider authors
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
 REPOSITORY ?= docker/attest-provider
 IMG := $(REPOSITORY):dev
 
diff --git a/NOTICE b/NOTICE
new file mode 100644
index 0000000..f730b82
--- /dev/null
+++ b/NOTICE
@@ -0,0 +1,15 @@
+Docker attest-provider
+Copyright Docker attest-provider authors
+
+This product includes software developed at Docker, Inc. (https://www.docker.com).
+
+The following is courtesy of our legal counsel:
+
+Use and transfer of Docker may be subject to certain restrictions by the
+United States and other governments.
+It is your responsibility to ensure that your use and/or transfer does not
+violate applicable laws.
+
+For more information, please see https://www.bis.doc.gov
+
+See also https://www.apache.org/dev/crypto.html and/or seek legal counsel.
diff --git a/main.go b/main.go
index cc841b0..1fcbd93 100644
--- a/main.go
+++ b/main.go
@@ -1,3 +1,19 @@
+/*
+   Copyright Docker attest-provider authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
 package main
 
 import (
diff --git a/main_test.go b/main_test.go
index f7fb812..4552ad5 100644
--- a/main_test.go
+++ b/main_test.go
@@ -1,3 +1,19 @@
+/*
+   Copyright Docker attest-provider authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
 package main
 
 import (
diff --git a/pkg/handler/mutate.go b/pkg/handler/mutate.go
index e21ef5a..61bd70b 100644
--- a/pkg/handler/mutate.go
+++ b/pkg/handler/mutate.go
@@ -1,3 +1,19 @@
+/*
+   Copyright Docker attest-provider authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
 package handler
 
 import (
diff --git a/pkg/handler/validate.go b/pkg/handler/validate.go
index fa78cf4..412dc5b 100644
--- a/pkg/handler/validate.go
+++ b/pkg/handler/validate.go
@@ -1,3 +1,19 @@
+/*
+   Copyright Docker attest-provider authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
 package handler
 
 import (
diff --git a/pkg/utils/utils.go b/pkg/utils/utils.go
index 87fcfa2..9d6419b 100644
--- a/pkg/utils/utils.go
+++ b/pkg/utils/utils.go
@@ -1,3 +1,19 @@
+/*
+   Copyright Docker attest-provider authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
 package utils
 
 import (
diff --git a/scripts/generate-tls-cert.sh b/scripts/generate-tls-cert.sh
index a8586ab..c0c7b82 100755
--- a/scripts/generate-tls-cert.sh
+++ b/scripts/generate-tls-cert.sh
@@ -1,5 +1,20 @@
 #!/usr/bin/env bash
 
+#   Copyright Docker attest-provider authors
+
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+
+
 set -o errexit
 set -o nounset
 set -o pipefail
diff --git a/template/bash.txt b/template/bash.txt
new file mode 100644
index 0000000..5ca1ba8
--- /dev/null
+++ b/template/bash.txt
@@ -0,0 +1,13 @@
+#   Copyright Docker attest-provider authors
+
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
diff --git a/template/dockerfile.txt b/template/dockerfile.txt
new file mode 100644
index 0000000..bfbf0aa
--- /dev/null
+++ b/template/dockerfile.txt
@@ -0,0 +1,13 @@
+#   Copyright Docker attest-provider authors
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
diff --git a/template/go.txt b/template/go.txt
new file mode 100644
index 0000000..1076ea9
--- /dev/null
+++ b/template/go.txt
@@ -0,0 +1,16 @@
+/*
+   Copyright Docker attest-provider authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
+
diff --git a/template/makefile.txt b/template/makefile.txt
new file mode 100644
index 0000000..bfbf0aa
--- /dev/null
+++ b/template/makefile.txt
@@ -0,0 +1,13 @@
+#   Copyright Docker attest-provider authors
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.