diff --git a/.reuse/dep5 b/.reuse/dep5
deleted file mode 100644
index 9f7264a..0000000
--- a/.reuse/dep5
+++ /dev/null
@@ -1,43 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: lifecycle-manager
-Upstream-Contact: IronCore authors <ospo@sap.com>
-Source: https://github.com/ironcore-dev/lifecycle-manager
-
-# --------------------------------------------------
-# source code
-
-Files:
-  .docker
-  .github/*
-  .gitignore
-  .golangci.yml
-  buf.gen.yaml
-  buf.work.yaml
-  CODEOWNERS
-  Makefile
-  PROJECT
-  api/proto/*
-  clientgo/openapi/api_violations.report
-  clientgo/connectrpc/*
-  config/*
-  go.mod
-  go.sum
-  hack/*
-Copyright: 2024 SAP SE or an SAP affiliate company and IronCore contributors
-License: Apache-2.0
-
-# --------------------------------------------------
-# documentation
-
-Files:
-  docs/*
-  README.md
-Copyright: 2024 SAP SE or an SAP affiliate company and IronCore contributors
-License: Apache-2.0
-
-# --------------------------------------------------
-# source dependencies
-
-Files: utils/envtest/internal/testing/certs/certs.go
-Copyright: 2021 The Kubernetes Authors.
-License: Apache-2.0
diff --git a/REUSE.toml b/REUSE.toml
new file mode 100644
index 0000000..f6c1367
--- /dev/null
+++ b/REUSE.toml
@@ -0,0 +1,22 @@
+version = 1
+SPDX-PackageName = "lifecycle-manager"
+SPDX-PackageSupplier = "IronCore authors <ospo@sap.com>"
+SPDX-PackageDownloadLocation = "https://github.com/ironcore-dev/lifecycle-manager"
+
+[[annotations]]
+path = [".docker", ".github/**", ".gitignore", ".golangci.yml", "buf.gen.yaml", "buf.work.yaml", "CODEOWNERS", "Makefile", "PROJECT", "api/proto/**", "clientgo/openapi/api_violations.report", "clientgo/connectrpc/**", "config/**", "go.mod", "go.sum", "hack/**"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2024 SAP SE or an SAP affiliate company and IronCore contributors"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = ["docs/**", "README.md"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2024 SAP SE or an SAP affiliate company and IronCore contributors"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = "utils/envtest/internal/testing/certs/certs.go"
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2021 The Kubernetes Authors."
+SPDX-License-Identifier = "Apache-2.0"