From f5185e4bd63071457fb83efef18603d02ae0517b Mon Sep 17 00:00:00 2001
From: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
Date: Thu, 1 Apr 2021 21:09:45 -0500
Subject: [PATCH] :seedling: included copyright headers.

---
 .github/workflows/codeql-analysis.yml  | 14 +++++++++++++
 .github/workflows/codescan.yml         | 14 +++++++++++++
 .github/workflows/docker.yaml          | 14 +++++++++++++
 .github/workflows/gitcache-docker.yaml | 14 +++++++++++++
 .github/workflows/goreleaser.yaml      | 14 +++++++++++++
 .github/workflows/integration.yml      | 14 +++++++++++++
 .github/workflows/main.yml             | 29 ++++++++++++++++++++++++++
 .github/workflows/ok-to-test.yml       | 14 +++++++++++++
 .github/workflows/stale.yml            | 14 +++++++++++++
 .github/workflows/synk-cron.yaml       | 14 +++++++++++++
 .github/workflows/synk.yaml            | 14 +++++++++++++
 .github/workflows/verify.yml           | 14 +++++++++++++
 cron/main.go                           | 14 +++++++++++++
 e2e/active_test.go                     | 14 +++++++++++++
 e2e/blob_test.go                       | 14 +++++++++++++
 e2e/branchprotection_test.go           | 14 +++++++++++++
 e2e/ci_tests_test.go                   | 14 +++++++++++++
 e2e/cii_best_practices_test.go         | 14 +++++++++++++
 e2e/code_review_test.go                | 14 +++++++++++++
 e2e/contributors_test.go               | 14 +++++++++++++
 e2e/diskcache_test.go                  | 14 +++++++++++++
 e2e/e2e_suite_test.go                  | 14 +++++++++++++
 e2e/executable_test.go                 | 14 +++++++++++++
 e2e/frozen_deps_test.go                | 14 +++++++++++++
 e2e/fuzzing_test.go                    | 14 +++++++++++++
 e2e/packaging_test.go                  | 14 +++++++++++++
 e2e/pull_requests_test.go              | 14 +++++++++++++
 e2e/sast_test.go                       | 14 +++++++++++++
 e2e/security_policy_test.go            | 14 +++++++++++++
 e2e/signedreleases_test.go             | 14 +++++++++++++
 e2e/signedtags_test.go                 | 14 +++++++++++++
 gitcache/.golangci.yml                 | 14 +++++++++++++
 gitcache/k8s/deployment.yaml           | 14 +++++++++++++
 gitcache/k8s/namespace.yaml            | 14 +++++++++++++
 gitcache/pkg/service.go                | 14 +++++++++++++
 k8s/cron.yaml                          | 14 +++++++++++++
 roundtripper/blob.go                   | 14 +++++++++++++
 scripts/main.go                        | 14 +++++++++++++
 38 files changed, 547 insertions(+)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index e90453c7..49d08d43 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 # For most projects, this workflow file will not need changing; you simply need
 # to commit it to your repository.
 #
diff --git a/.github/workflows/codescan.yml b/.github/workflows/codescan.yml
index 5a5750b9..262d9b6a 100644
--- a/.github/workflows/codescan.yml
+++ b/.github/workflows/codescan.yml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: "Codescanning"
 on:
   push:
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 2cfaa195..3fb11107 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: Docker
 on:
   push:
diff --git a/.github/workflows/gitcache-docker.yaml b/.github/workflows/gitcache-docker.yaml
index 55b7471e..bceabae7 100644
--- a/.github/workflows/gitcache-docker.yaml
+++ b/.github/workflows/gitcache-docker.yaml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: Docker
 on:
   push:
diff --git a/.github/workflows/goreleaser.yaml b/.github/workflows/goreleaser.yaml
index 82c1247a..03275d72 100644
--- a/.github/workflows/goreleaser.yaml
+++ b/.github/workflows/goreleaser.yaml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: goreleaser
 
 on:
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index fa279813..e8287860 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 # Run secret-dependent integration tests only after /ok-to-test approval
 on:
   pull_request:
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index fdec8bf4..d717650c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: build
 on: [push, pull_request]
 jobs:
@@ -18,3 +32,18 @@ jobs:
       - uses: codecov/codecov-action@v1
         with:
           files: e2e/e2e.coverprofile,pkg/pkg.coverprofile,checks/checks.coverprofile
+  license-check:
+    name: license boilerplate check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-go@v2
+        with:
+          go-version: '1.16'
+      - name: Install addlicense
+        run: go install github.com/google/addlicense@latest
+      - name: Check license headers
+        run: |
+          set -e
+          addlicense -l apache -c 'Security Scorecard Authors' -v *
+          git diff --exit-code
\ No newline at end of file
diff --git a/.github/workflows/ok-to-test.yml b/.github/workflows/ok-to-test.yml
index 6665211a..21d8dc4f 100644
--- a/.github/workflows/ok-to-test.yml
+++ b/.github/workflows/ok-to-test.yml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 # If someone with write access comments "/ok-to-test" on a pull request, emit a repository_dispatch event
 name: Ok To Test
 
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 185283d6..50df79d6 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: "Close stale issues"
 on:
   schedule:
diff --git a/.github/workflows/synk-cron.yaml b/.github/workflows/synk-cron.yaml
index d67aafbe..00291e07 100644
--- a/.github/workflows/synk-cron.yaml
+++ b/.github/workflows/synk-cron.yaml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: synk-cron-job-check
 on: push
 jobs:
diff --git a/.github/workflows/synk.yaml b/.github/workflows/synk.yaml
index 06c3ac78..9933450f 100644
--- a/.github/workflows/synk.yaml
+++ b/.github/workflows/synk.yaml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: Snyk IaC
 on: push
 jobs:
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 8d346fa2..9a30b7a4 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 name: PR Verifier
 on:
   pull_request_target:
diff --git a/cron/main.go b/cron/main.go
index 821769da..9c570bca 100644
--- a/cron/main.go
+++ b/cron/main.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package main
 
 import (
diff --git a/e2e/active_test.go b/e2e/active_test.go
index 56020e9b..dcbecdcf 100644
--- a/e2e/active_test.go
+++ b/e2e/active_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/blob_test.go b/e2e/blob_test.go
index 4eba59c9..4581bf80 100644
--- a/e2e/blob_test.go
+++ b/e2e/blob_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/branchprotection_test.go b/e2e/branchprotection_test.go
index b1b43352..a7f61550 100644
--- a/e2e/branchprotection_test.go
+++ b/e2e/branchprotection_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/ci_tests_test.go b/e2e/ci_tests_test.go
index aabaa901..52faf43c 100644
--- a/e2e/ci_tests_test.go
+++ b/e2e/ci_tests_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/cii_best_practices_test.go b/e2e/cii_best_practices_test.go
index 21b94cb3..308c626b 100644
--- a/e2e/cii_best_practices_test.go
+++ b/e2e/cii_best_practices_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/code_review_test.go b/e2e/code_review_test.go
index 1cd9f5b9..35d9b6fa 100644
--- a/e2e/code_review_test.go
+++ b/e2e/code_review_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/contributors_test.go b/e2e/contributors_test.go
index b8e8b548..17bb532e 100644
--- a/e2e/contributors_test.go
+++ b/e2e/contributors_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/diskcache_test.go b/e2e/diskcache_test.go
index 4a3189f6..2adeef95 100644
--- a/e2e/diskcache_test.go
+++ b/e2e/diskcache_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/e2e_suite_test.go b/e2e/e2e_suite_test.go
index 806c2eff..7bdcc4f4 100644
--- a/e2e/e2e_suite_test.go
+++ b/e2e/e2e_suite_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/executable_test.go b/e2e/executable_test.go
index 3a954822..aef4ae8f 100644
--- a/e2e/executable_test.go
+++ b/e2e/executable_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/frozen_deps_test.go b/e2e/frozen_deps_test.go
index f71c5409..3473394f 100644
--- a/e2e/frozen_deps_test.go
+++ b/e2e/frozen_deps_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/fuzzing_test.go b/e2e/fuzzing_test.go
index 5756cfae..58f7d7c4 100644
--- a/e2e/fuzzing_test.go
+++ b/e2e/fuzzing_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/packaging_test.go b/e2e/packaging_test.go
index 8204687a..1d50713c 100644
--- a/e2e/packaging_test.go
+++ b/e2e/packaging_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/pull_requests_test.go b/e2e/pull_requests_test.go
index 4258fd3e..2749b970 100644
--- a/e2e/pull_requests_test.go
+++ b/e2e/pull_requests_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/sast_test.go b/e2e/sast_test.go
index 82fa06b0..283d7e75 100644
--- a/e2e/sast_test.go
+++ b/e2e/sast_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/security_policy_test.go b/e2e/security_policy_test.go
index e3dc7417..51785ff6 100644
--- a/e2e/security_policy_test.go
+++ b/e2e/security_policy_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/signedreleases_test.go b/e2e/signedreleases_test.go
index 1627a3f5..99a493fb 100644
--- a/e2e/signedreleases_test.go
+++ b/e2e/signedreleases_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/e2e/signedtags_test.go b/e2e/signedtags_test.go
index 1e25d95b..8d7ff6f4 100644
--- a/e2e/signedtags_test.go
+++ b/e2e/signedtags_test.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package e2e
 
 import (
diff --git a/gitcache/.golangci.yml b/gitcache/.golangci.yml
index e24b62dc..872e94d0 100644
--- a/gitcache/.golangci.yml
+++ b/gitcache/.golangci.yml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 ---
 run:
   concurrency: 6
diff --git a/gitcache/k8s/deployment.yaml b/gitcache/k8s/deployment.yaml
index b421bfd9..62a9cc37 100644
--- a/gitcache/k8s/deployment.yaml
+++ b/gitcache/k8s/deployment.yaml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 apiVersion: apps/v1
 kind: Deployment
 metadata:
diff --git a/gitcache/k8s/namespace.yaml b/gitcache/k8s/namespace.yaml
index cb9d68d9..a15c955f 100644
--- a/gitcache/k8s/namespace.yaml
+++ b/gitcache/k8s/namespace.yaml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 apiVersion: v1
 kind: Namespace
 metadata:
diff --git a/gitcache/pkg/service.go b/gitcache/pkg/service.go
index 2fb03577..7d6758d6 100644
--- a/gitcache/pkg/service.go
+++ b/gitcache/pkg/service.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package pkg
 
 import (
diff --git a/k8s/cron.yaml b/k8s/cron.yaml
index 75c7e17c..de9d4578 100644
--- a/k8s/cron.yaml
+++ b/k8s/cron.yaml
@@ -1,3 +1,17 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
 apiVersion: batch/v1beta1
 kind: CronJob
 metadata:
diff --git a/roundtripper/blob.go b/roundtripper/blob.go
index 7a360a4f..afc2b203 100644
--- a/roundtripper/blob.go
+++ b/roundtripper/blob.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package roundtripper
 
 import (
diff --git a/scripts/main.go b/scripts/main.go
index 6c6e57f9..a3d2282a 100644
--- a/scripts/main.go
+++ b/scripts/main.go
@@ -1,3 +1,17 @@
+// Copyright 2021 Security Scorecard Authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
 package main
 
 import (