diff --git a/.release/ci.hcl b/.release/ci.hcl
index 25c7230..9e78864 100644
--- a/.release/ci.hcl
+++ b/.release/ci.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 schema = "1"
 
 project "vault-ssh-helper" {
diff --git a/.release/release-metadata.hcl b/.release/release-metadata.hcl
index e5eabf5..aed2b6b 100644
--- a/.release/release-metadata.hcl
+++ b/.release/release-metadata.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 url_license = "https://github.com/hashicorp/vault-ssh-helper/blob/main/LICENSE"
 url_project_website = "https://www.vaultproject.io/docs/secrets/ssh/one-time-ssh-passwords"
 url_source_repository = "https://github.com/hashicorp/vault-ssh-helper"
\ No newline at end of file
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
index 506c2bc..c10af92 100644
--- a/.release/security-scan.hcl
+++ b/.release/security-scan.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 binary {
 	secrets      = true
 	go_modules   = true
diff --git a/helper/agent.go b/helper/agent.go
index 5460741..91660b9 100644
--- a/helper/agent.go
+++ b/helper/agent.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package helper
 
 import (
diff --git a/helper/agent_test.go b/helper/agent_test.go
index 006c3ca..eec6547 100644
--- a/helper/agent_test.go
+++ b/helper/agent_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package helper
 
 import (
diff --git a/main.go b/main.go
index 17fd4bd..6647f32 100644
--- a/main.go
+++ b/main.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package main
 
 import (
diff --git a/main_test.go b/main_test.go
index a33aabb..5914e58 100644
--- a/main_test.go
+++ b/main_test.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package main
 
 import (
diff --git a/scripts/build.sh b/scripts/build.sh
index a654ba3..fdfef35 100755
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -1,4 +1,7 @@
 #!/usr/bin/env bash
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 #
 # This script builds the application from source for multiple platforms.
 set -e
diff --git a/scripts/cross/Dockerfile b/scripts/cross/Dockerfile
index 866b14b..d8fbf1f 100644
--- a/scripts/cross/Dockerfile
+++ b/scripts/cross/Dockerfile
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 FROM debian:stable
 
 RUN apt-get update -y && apt-get install --no-install-recommends -y -q \
diff --git a/scripts/dist.sh b/scripts/dist.sh
index 0b30cfd..b5cf640 100755
--- a/scripts/dist.sh
+++ b/scripts/dist.sh
@@ -1,4 +1,7 @@
 #!/usr/bin/env bash
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 set -e
 
 # Get the version from the command line
diff --git a/scripts/update_deps.sh b/scripts/update_deps.sh
index 970ce9f..17e88b9 100755
--- a/scripts/update_deps.sh
+++ b/scripts/update_deps.sh
@@ -1,4 +1,7 @@
 #!/bin/sh
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 
 set -e
 
diff --git a/test-fixtures/config.hcl b/test-fixtures/config.hcl
index 9ab79da..7f42d69 100644
--- a/test-fixtures/config.hcl
+++ b/test-fixtures/config.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 vault_addr = "http://127.0.0.1:8200"
 ssh_mount_point = "ssh"
 tls_skip_verify=false
diff --git a/version.go b/version.go
index b7c50d6..be6abb0 100644
--- a/version.go
+++ b/version.go
@@ -1,3 +1,6 @@
+// Copyright (c) HashiCorp, Inc.
+// SPDX-License-Identifier: MPL-2.0
+
 package main
 
 import (