diff --git a/attestation/attestation.go b/attestation/attestation.go
index 7f040cf..4eb1f82 100644
--- a/attestation/attestation.go
+++ b/attestation/attestation.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/attestation_test.go b/attestation/attestation_test.go
index 362b3ab..2d70a28 100644
--- a/attestation/attestation_test.go
+++ b/attestation/attestation_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation_test
 
 import (
diff --git a/attestation/example_attestation_manifest_test.go b/attestation/example_attestation_manifest_test.go
index a8e0ece..b434f0f 100644
--- a/attestation/example_attestation_manifest_test.go
+++ b/attestation/example_attestation_manifest_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation_test
 
 import (
diff --git a/attestation/layout.go b/attestation/layout.go
index 94a72f3..b3fbb15 100644
--- a/attestation/layout.go
+++ b/attestation/layout.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/layout_test.go b/attestation/layout_test.go
index 4be30fe..d05a3c9 100644
--- a/attestation/layout_test.go
+++ b/attestation/layout_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation_test
 
 import (
diff --git a/attestation/mock.go b/attestation/mock.go
index 98dacc9..a1ef3b7 100644
--- a/attestation/mock.go
+++ b/attestation/mock.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/referrers.go b/attestation/referrers.go
index 4c109ed..1d93541 100644
--- a/attestation/referrers.go
+++ b/attestation/referrers.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/referrers_test.go b/attestation/referrers_test.go
index c54d919..d0e04f8 100644
--- a/attestation/referrers_test.go
+++ b/attestation/referrers_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation_test
 
 import (
diff --git a/attestation/registry.go b/attestation/registry.go
index 73639d3..f772f13 100644
--- a/attestation/registry.go
+++ b/attestation/registry.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/registry_test.go b/attestation/registry_test.go
index dbcb128..89e29bc 100644
--- a/attestation/registry_test.go
+++ b/attestation/registry_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation_test
 
 import (
diff --git a/attestation/resolver.go b/attestation/resolver.go
index 7eae516..f618c35 100644
--- a/attestation/resolver.go
+++ b/attestation/resolver.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/sign.go b/attestation/sign.go
index 55eea11..09bc236 100644
--- a/attestation/sign.go
+++ b/attestation/sign.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/sign_test.go b/attestation/sign_test.go
index 690998f..c7ce2be 100644
--- a/attestation/sign_test.go
+++ b/attestation/sign_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation_test
 
 import (
diff --git a/attestation/types.go b/attestation/types.go
index 043312d..bf5d3f5 100644
--- a/attestation/types.go
+++ b/attestation/types.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/types_test.go b/attestation/types_test.go
index 3de793e..a17fafe 100644
--- a/attestation/types_test.go
+++ b/attestation/types_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/verifier.go b/attestation/verifier.go
index 482aefa..c731698 100644
--- a/attestation/verifier.go
+++ b/attestation/verifier.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/verifier_test.go b/attestation/verifier_test.go
index d2b6d1e..49e4535 100644
--- a/attestation/verifier_test.go
+++ b/attestation/verifier_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/verify.go b/attestation/verify.go
index fbd47d6..fac6b1e 100644
--- a/attestation/verify.go
+++ b/attestation/verify.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/attestation/verify_test.go b/attestation/verify_test.go
index 0e3f0fc..40217a0 100644
--- a/attestation/verify_test.go
+++ b/attestation/verify_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation_test
 
 import (
diff --git a/attestation/vsa.go b/attestation/vsa.go
index d334d03..a0b291f 100644
--- a/attestation/vsa.go
+++ b/attestation/vsa.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attestation
 
 import (
diff --git a/example_sign_test.go b/example_sign_test.go
index 97ab9a7..ed5a0fb 100644
--- a/example_sign_test.go
+++ b/example_sign_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attest_test
 
 import (
diff --git a/example_verify_test.go b/example_verify_test.go
index b91deee..1b1fc0c 100644
--- a/example_verify_test.go
+++ b/example_verify_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attest_test
 
 import (
diff --git a/internal/embed/root.go b/internal/embed/root.go
index 9bf20ae..8e16d8b 100644
--- a/internal/embed/root.go
+++ b/internal/embed/root.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package embed
 
 import (
diff --git a/internal/test/test.go b/internal/test/test.go
index dbc2cbf..1a44b2f 100644
--- a/internal/test/test.go
+++ b/internal/test/test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package test
 
 import (
diff --git a/internal/util/crypto.go b/internal/util/crypto.go
index f28d63a..419c0b0 100644
--- a/internal/util/crypto.go
+++ b/internal/util/crypto.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package util
 
 import (
diff --git a/mapping/mapping.go b/mapping/mapping.go
index 342454a..1d0b800 100644
--- a/mapping/mapping.go
+++ b/mapping/mapping.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mapping
 
 import (
diff --git a/mapping/mapping_test.go b/mapping/mapping_test.go
index 06d4a94..5ec7f91 100644
--- a/mapping/mapping_test.go
+++ b/mapping/mapping_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mapping
 
 import (
diff --git a/mapping/match.go b/mapping/match.go
index cfac8b6..4ebb762 100644
--- a/mapping/match.go
+++ b/mapping/match.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mapping
 
 import (
diff --git a/mapping/match_test.go b/mapping/match_test.go
index 31f0c61..69223a3 100644
--- a/mapping/match_test.go
+++ b/mapping/match_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mapping
 
 import (
diff --git a/mapping/types.go b/mapping/types.go
index 96192e3..aefc748 100644
--- a/mapping/types.go
+++ b/mapping/types.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mapping
 
 import (
diff --git a/mirror/example_mirror_test.go b/mirror/example_mirror_test.go
index 51ca46d..f779a42 100644
--- a/mirror/example_mirror_test.go
+++ b/mirror/example_mirror_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mirror_test
 
 import (
diff --git a/mirror/metadata.go b/mirror/metadata.go
index fc49948..30d4052 100644
--- a/mirror/metadata.go
+++ b/mirror/metadata.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mirror
 
 import (
diff --git a/mirror/metadata_test.go b/mirror/metadata_test.go
index fed45d3..4dcb654 100644
--- a/mirror/metadata_test.go
+++ b/mirror/metadata_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mirror
 
 import (
diff --git a/mirror/mirror.go b/mirror/mirror.go
index 5cb3cff..5e25252 100644
--- a/mirror/mirror.go
+++ b/mirror/mirror.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mirror
 
 import (
diff --git a/mirror/targets.go b/mirror/targets.go
index f189579..eb098f6 100644
--- a/mirror/targets.go
+++ b/mirror/targets.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mirror
 
 import (
diff --git a/mirror/targets_test.go b/mirror/targets_test.go
index 22dc7d2..9d91e08 100644
--- a/mirror/targets_test.go
+++ b/mirror/targets_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mirror
 
 import (
diff --git a/mirror/types.go b/mirror/types.go
index 865c17f..2c3843e 100644
--- a/mirror/types.go
+++ b/mirror/types.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package mirror
 
 import (
diff --git a/oci/authn.go b/oci/authn.go
index 98452a0..83fb0a8 100644
--- a/oci/authn.go
+++ b/oci/authn.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci
 
 import (
diff --git a/oci/authn_test.go b/oci/authn_test.go
index e415d7a..a3ed992 100644
--- a/oci/authn_test.go
+++ b/oci/authn_test.go
@@ -1,5 +1,20 @@
 //go:build e2e
 
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci_test
 
 import (
diff --git a/oci/oci.go b/oci/oci.go
index 85183fc..a3b2604 100644
--- a/oci/oci.go
+++ b/oci/oci.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci
 
 import (
diff --git a/oci/oci_test.go b/oci/oci_test.go
index 65766d7..d1fb279 100644
--- a/oci/oci_test.go
+++ b/oci/oci_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci_test
 
 import (
diff --git a/oci/output.go b/oci/output.go
index 66399eb..a419d3d 100644
--- a/oci/output.go
+++ b/oci/output.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci
 
 import (
diff --git a/oci/output_test.go b/oci/output_test.go
index e313836..2c97351 100644
--- a/oci/output_test.go
+++ b/oci/output_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci_test
 
 import (
diff --git a/oci/registry.go b/oci/registry.go
index b461b4b..48928e2 100644
--- a/oci/registry.go
+++ b/oci/registry.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci
 
 import (
diff --git a/oci/resolver.go b/oci/resolver.go
index a5aaae5..32eaa03 100644
--- a/oci/resolver.go
+++ b/oci/resolver.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci
 
 import (
diff --git a/oci/types.go b/oci/types.go
index 78e6f62..cfd80f4 100644
--- a/oci/types.go
+++ b/oci/types.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci
 
 import (
diff --git a/oci/types_test.go b/oci/types_test.go
index 704fdd9..0abe458 100644
--- a/oci/types_test.go
+++ b/oci/types_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package oci
 
 import (
diff --git a/policy/evaluator.go b/policy/evaluator.go
index 4e28c37..3308974 100644
--- a/policy/evaluator.go
+++ b/policy/evaluator.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy
 
 import (
diff --git a/policy/mock.go b/policy/mock.go
index bacd5ff..7c9d556 100644
--- a/policy/mock.go
+++ b/policy/mock.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy
 
 import (
diff --git a/policy/policy.go b/policy/policy.go
index d63ab6a..ecc1d62 100644
--- a/policy/policy.go
+++ b/policy/policy.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy
 
 import (
diff --git a/policy/policy_test.go b/policy/policy_test.go
index c2d43c6..478e46f 100644
--- a/policy/policy_test.go
+++ b/policy/policy_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy_test
 
 import (
diff --git a/policy/rego.go b/policy/rego.go
index ca4b8f9..bd7ef91 100644
--- a/policy/rego.go
+++ b/policy/rego.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy
 
 import (
diff --git a/policy/rego_test.go b/policy/rego_test.go
index 5f44083..5c9a991 100644
--- a/policy/rego_test.go
+++ b/policy/rego_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy
 
 import (
diff --git a/policy/resolver.go b/policy/resolver.go
index 66cfb47..40719b0 100644
--- a/policy/resolver.go
+++ b/policy/resolver.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy
 
 import (
diff --git a/policy/resolver_test.go b/policy/resolver_test.go
index 36412c5..1eb2c54 100644
--- a/policy/resolver_test.go
+++ b/policy/resolver_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy_test
 
 import (
diff --git a/policy/types.go b/policy/types.go
index a14e56a..0c82c55 100644
--- a/policy/types.go
+++ b/policy/types.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package policy
 
 import (
diff --git a/scripts/gen-testdata.sh b/scripts/gen-testdata.sh
index 47621af..4535ab9 100755
--- a/scripts/gen-testdata.sh
+++ b/scripts/gen-testdata.sh
@@ -1,4 +1,19 @@
 #!/bin/bash
+
+#   Copyright 2024 Docker attest authors
+
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+
 set -eo pipefail
 
 echo "Starting the process to generate testdata..."
diff --git a/sign.go b/sign.go
index 832cca2..86aa3d3 100644
--- a/sign.go
+++ b/sign.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attest
 
 import (
diff --git a/sign_test.go b/sign_test.go
index 14c1e6a..dfd079f 100644
--- a/sign_test.go
+++ b/sign_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attest
 
 import (
diff --git a/signerverifier/aws.go b/signerverifier/aws.go
index a61568c..4a41f05 100644
--- a/signerverifier/aws.go
+++ b/signerverifier/aws.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package signerverifier
 
 import (
diff --git a/signerverifier/common.go b/signerverifier/common.go
index 0747460..2359822 100644
--- a/signerverifier/common.go
+++ b/signerverifier/common.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package signerverifier
 
 import (
diff --git a/signerverifier/ecdsa.go b/signerverifier/ecdsa.go
index 18bf9c7..025ad58 100644
--- a/signerverifier/ecdsa.go
+++ b/signerverifier/ecdsa.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package signerverifier
 
 import (
diff --git a/signerverifier/gcp.go b/signerverifier/gcp.go
index 0768451..3bbaf62 100644
--- a/signerverifier/gcp.go
+++ b/signerverifier/gcp.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package signerverifier
 
 import (
diff --git a/signerverifier/gcp_test.go b/signerverifier/gcp_test.go
index e603ab9..64e934e 100644
--- a/signerverifier/gcp_test.go
+++ b/signerverifier/gcp_test.go
@@ -1,5 +1,20 @@
 //go:build e2e
 
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package signerverifier
 
 import (
diff --git a/signerverifier/keyid.go b/signerverifier/keyid.go
index f709f7d..dced9ba 100644
--- a/signerverifier/keyid.go
+++ b/signerverifier/keyid.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package signerverifier
 
 import (
diff --git a/signerverifier/parse.go b/signerverifier/parse.go
index 93e042e..274b81b 100644
--- a/signerverifier/parse.go
+++ b/signerverifier/parse.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package signerverifier
 
 import (
diff --git a/template/bash.txt b/template/bash.txt
new file mode 100644
index 0000000..639a2ec
--- /dev/null
+++ b/template/bash.txt
@@ -0,0 +1,13 @@
+#   Copyright 2024 Docker attest authors
+
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
diff --git a/template/dockerfile.txt b/template/dockerfile.txt
new file mode 100644
index 0000000..4f1f175
--- /dev/null
+++ b/template/dockerfile.txt
@@ -0,0 +1,13 @@
+#   Copyright 2024 Docker attest authors
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
diff --git a/template/go.txt b/template/go.txt
new file mode 100644
index 0000000..f3db7e9
--- /dev/null
+++ b/template/go.txt
@@ -0,0 +1,15 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
diff --git a/template/makefile.txt b/template/makefile.txt
new file mode 100644
index 0000000..4f1f175
--- /dev/null
+++ b/template/makefile.txt
@@ -0,0 +1,13 @@
+#   Copyright 2024 Docker attest authors
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
diff --git a/test/Dockerfile b/test/Dockerfile
index 274a7c6..dbc42eb 100644
--- a/test/Dockerfile
+++ b/test/Dockerfile
@@ -1,3 +1,16 @@
+#   Copyright 2024 Docker attest authors
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
 FROM alpine AS build
 RUN echo "hello world" > /tmp/hello.txt
 
diff --git a/tlog/mock.go b/tlog/mock.go
index 9126718..724d80d 100644
--- a/tlog/mock.go
+++ b/tlog/mock.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tlog
 
 import (
diff --git a/tlog/rekor.go b/tlog/rekor.go
index 2ae536b..284423c 100644
--- a/tlog/rekor.go
+++ b/tlog/rekor.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tlog
 
 import (
diff --git a/tlog/rekor_test.go b/tlog/rekor_test.go
index 50ef0bb..de7a841 100644
--- a/tlog/rekor_test.go
+++ b/tlog/rekor_test.go
@@ -1,5 +1,20 @@
 //go:build e2e
 
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tlog
 
 import (
diff --git a/tlog/tl.go b/tlog/tl.go
index 46a2dc7..6b8c1e1 100644
--- a/tlog/tl.go
+++ b/tlog/tl.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tlog
 
 import (
diff --git a/tlog/tl_test.go b/tlog/tl_test.go
index 15f9412..bdd7677 100644
--- a/tlog/tl_test.go
+++ b/tlog/tl_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tlog
 
 import (
diff --git a/tuf/example_registry_test.go b/tuf/example_registry_test.go
index d67880b..c6c5466 100644
--- a/tuf/example_registry_test.go
+++ b/tuf/example_registry_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tuf_test
 
 import (
diff --git a/tuf/mock.go b/tuf/mock.go
index f024535..eceee42 100644
--- a/tuf/mock.go
+++ b/tuf/mock.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tuf
 
 import (
diff --git a/tuf/registry.go b/tuf/registry.go
index c59593f..20345d3 100644
--- a/tuf/registry.go
+++ b/tuf/registry.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tuf
 
 import (
diff --git a/tuf/registry_test.go b/tuf/registry_test.go
index f7b4094..02aac28 100644
--- a/tuf/registry_test.go
+++ b/tuf/registry_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tuf
 
 import (
diff --git a/tuf/tuf.go b/tuf/tuf.go
index e54911c..0bf8d56 100644
--- a/tuf/tuf.go
+++ b/tuf/tuf.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tuf
 
 import (
diff --git a/tuf/tuf_test.go b/tuf/tuf_test.go
index 9edb784..383ba1c 100644
--- a/tuf/tuf_test.go
+++ b/tuf/tuf_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tuf
 
 import (
diff --git a/tuf/version.go b/tuf/version.go
index 671cf5b..89a980d 100644
--- a/tuf/version.go
+++ b/tuf/version.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tuf
 
 import (
diff --git a/tuf/version_test.go b/tuf/version_test.go
index 46c21bd..f94380a 100644
--- a/tuf/version_test.go
+++ b/tuf/version_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package tuf
 
 import (
diff --git a/types.go b/types.go
index 3824208..ce63ee8 100644
--- a/types.go
+++ b/types.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attest
 
 import (
diff --git a/useragent/useragent.go b/useragent/useragent.go
index f551f4a..ed9be2e 100644
--- a/useragent/useragent.go
+++ b/useragent/useragent.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package useragent
 
 import (
diff --git a/useragent/useragent_test.go b/useragent/useragent_test.go
index 3cc8d92..7a66a4b 100644
--- a/useragent/useragent_test.go
+++ b/useragent/useragent_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package useragent
 
 import (
diff --git a/verify.go b/verify.go
index ac2c0d6..83a26ec 100644
--- a/verify.go
+++ b/verify.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attest
 
 import (
diff --git a/verify_test.go b/verify_test.go
index ff51fd5..3dd1ab3 100644
--- a/verify_test.go
+++ b/verify_test.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package attest
 
 import (
diff --git a/version/version.go b/version/version.go
index 166dcaa..fc03f0f 100644
--- a/version/version.go
+++ b/version/version.go
@@ -1,3 +1,18 @@
+/*
+   Copyright 2024 Docker attest authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+*/
 package version
 
 import (