diff --git a/actions/get_note/action.yml b/actions/get_note/action.yml index 404f35aa..1cb9ba66 100644 --- a/actions/get_note/action.yml +++ b/actions/get_note/action.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +# SPDX-License-Identifier: Apache-2.0 +--- name: Gets data from a git note description: Gets data from the git note and stores it in the provided path. inputs: diff --git a/actions/slsa_with_provenance/action.yml b/actions/slsa_with_provenance/action.yml index 5ebece7c..012b70eb 100644 --- a/actions/slsa_with_provenance/action.yml +++ b/actions/slsa_with_provenance/action.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +# SPDX-License-Identifier: Apache-2.0 +--- name: SLSA Source Provenance Creator description: Creates SLSA Source Track Provenance diff --git a/actions/store_note/action.yml b/actions/store_note/action.yml index dfd2e026..62c8db1f 100644 --- a/actions/store_note/action.yml +++ b/actions/store_note/action.yml @@ -1,3 +1,6 @@ +# SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +# SPDX-License-Identifier: Apache-2.0 +--- name: Store data in git notes description: Stores provided data in a git note for the current commit. inputs: diff --git a/internal/cmd/audit.go b/internal/cmd/audit.go index 2c6ec2e5..87d3e831 100644 --- a/internal/cmd/audit.go +++ b/internal/cmd/audit.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/auth.go b/internal/cmd/auth.go index 126e8fc2..36ef155e 100644 --- a/internal/cmd/auth.go +++ b/internal/cmd/auth.go @@ -1,4 +1,4 @@ -// SPDX-FileCopyrightText: Copyright 2025 Carabiner Systems, Inc +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors // SPDX-License-Identifier: Apache-2.0 package cmd diff --git a/internal/cmd/checklevel.go b/internal/cmd/checklevel.go index 9ce1433f..437f3b67 100644 --- a/internal/cmd/checklevel.go +++ b/internal/cmd/checklevel.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/checklevelprov.go b/internal/cmd/checklevelprov.go index fa5f2749..40782235 100644 --- a/internal/cmd/checklevelprov.go +++ b/internal/cmd/checklevelprov.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/checktag.go b/internal/cmd/checktag.go index 12f570d7..b96f6e1d 100644 --- a/internal/cmd/checktag.go +++ b/internal/cmd/checktag.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/createpolicy.go b/internal/cmd/createpolicy.go index 2097c202..d159a260 100644 --- a/internal/cmd/createpolicy.go +++ b/internal/cmd/createpolicy.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/logo.go b/internal/cmd/logo.go index de1a0e2f..ef5a7365 100644 --- a/internal/cmd/logo.go +++ b/internal/cmd/logo.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd var logo = []string{ diff --git a/internal/cmd/options.go b/internal/cmd/options.go index 4c60a0c4..27765c0d 100644 --- a/internal/cmd/options.go +++ b/internal/cmd/options.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/policy.go b/internal/cmd/policy.go index c7fd6a04..73a34031 100644 --- a/internal/cmd/policy.go +++ b/internal/cmd/policy.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/prov.go b/internal/cmd/prov.go index 9afe7012..288272f0 100644 --- a/internal/cmd/prov.go +++ b/internal/cmd/prov.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/root.go b/internal/cmd/root.go index 089a0388..6bd5053f 100644 --- a/internal/cmd/root.go +++ b/internal/cmd/root.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/setup.go b/internal/cmd/setup.go index 3cb00c68..465b26bb 100644 --- a/internal/cmd/setup.go +++ b/internal/cmd/setup.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/cmd/status.go b/internal/cmd/status.go index 0e2083dd..64178ae9 100644 --- a/internal/cmd/status.go +++ b/internal/cmd/status.go @@ -1,4 +1,4 @@ -// SPDX-FileCopyrightText: Copyright 2025 Carabiner Systems, Inc +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors // SPDX-License-Identifier: Apache-2.0 package cmd diff --git a/internal/cmd/verifycommit.go b/internal/cmd/verifycommit.go index 410d7cb9..c35f5fe5 100644 --- a/internal/cmd/verifycommit.go +++ b/internal/cmd/verifycommit.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package cmd import ( diff --git a/internal/tools.go b/internal/tools.go index 0b3ea259..7d8d829a 100644 --- a/internal/tools.go +++ b/internal/tools.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + //go:build tools // This file forces the import of modules used for build scripts and tests diff --git a/main.go b/main.go index 91781d16..64395e98 100644 --- a/main.go +++ b/main.go @@ -1,6 +1,6 @@ -/* -Copyright © 2025 NAME HERE -*/ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package main import ( diff --git a/pkg/attest/log.go b/pkg/attest/log.go index 390dddba..977fe37b 100644 --- a/pkg/attest/log.go +++ b/pkg/attest/log.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest import ( diff --git a/pkg/attest/provenance.go b/pkg/attest/provenance.go index 44a6bd0e..0426d590 100644 --- a/pkg/attest/provenance.go +++ b/pkg/attest/provenance.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest import ( diff --git a/pkg/attest/provenance_test.go b/pkg/attest/provenance_test.go index 74401e13..1a97811a 100644 --- a/pkg/attest/provenance_test.go +++ b/pkg/attest/provenance_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest import ( diff --git a/pkg/attest/sign.go b/pkg/attest/sign.go index db72b7bb..cda62ff7 100644 --- a/pkg/attest/sign.go +++ b/pkg/attest/sign.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest import ( diff --git a/pkg/attest/statement.go b/pkg/attest/statement.go index 5c59a12b..107df87e 100644 --- a/pkg/attest/statement.go +++ b/pkg/attest/statement.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest import ( diff --git a/pkg/attest/statement_test.go b/pkg/attest/statement_test.go index bb952326..4a77d68b 100644 --- a/pkg/attest/statement_test.go +++ b/pkg/attest/statement_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest import ( diff --git a/pkg/attest/verify.go b/pkg/attest/verify.go index 34bcf533..369f7a9e 100644 --- a/pkg/attest/verify.go +++ b/pkg/attest/verify.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest import ( diff --git a/pkg/attest/vsa.go b/pkg/attest/vsa.go index 288559bb..be580ffe 100644 --- a/pkg/attest/vsa.go +++ b/pkg/attest/vsa.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest import ( diff --git a/pkg/attest/vsa_test.go b/pkg/attest/vsa_test.go index d393b86e..3afa6a9a 100644 --- a/pkg/attest/vsa_test.go +++ b/pkg/attest/vsa_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package attest // TODO: This test package uses some functions that live in provenance_test.go diff --git a/pkg/audit/audit.go b/pkg/audit/audit.go index 4f780fe4..49e9d6a8 100644 --- a/pkg/audit/audit.go +++ b/pkg/audit/audit.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package audit import ( diff --git a/pkg/auth/authenticator.go b/pkg/auth/authenticator.go index c7b7e010..9233a20b 100644 --- a/pkg/auth/authenticator.go +++ b/pkg/auth/authenticator.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + //go:generate go run github.com/maxbrunsfeld/counterfeiter/v6 -generate package auth diff --git a/pkg/auth/implementation.go b/pkg/auth/implementation.go index fdfa58b9..175b7917 100644 --- a/pkg/auth/implementation.go +++ b/pkg/auth/implementation.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package auth import ( diff --git a/pkg/ghcontrol/checklevel.go b/pkg/ghcontrol/checklevel.go index 13896e8f..fc78f0fc 100644 --- a/pkg/ghcontrol/checklevel.go +++ b/pkg/ghcontrol/checklevel.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package ghcontrol import ( diff --git a/pkg/ghcontrol/checklevel_test.go b/pkg/ghcontrol/checklevel_test.go index bcf85bd3..619d2adf 100644 --- a/pkg/ghcontrol/checklevel_test.go +++ b/pkg/ghcontrol/checklevel_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package ghcontrol import ( diff --git a/pkg/ghcontrol/connection.go b/pkg/ghcontrol/connection.go index 99ff3107..bcc709e1 100644 --- a/pkg/ghcontrol/connection.go +++ b/pkg/ghcontrol/connection.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package ghcontrol import ( diff --git a/pkg/ghcontrol/connection_test.go b/pkg/ghcontrol/connection_test.go index 65565468..152a3934 100644 --- a/pkg/ghcontrol/connection_test.go +++ b/pkg/ghcontrol/connection_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package ghcontrol import ( diff --git a/pkg/ghcontrol/git_types.go b/pkg/ghcontrol/git_types.go index 578d9314..5a781e51 100644 --- a/pkg/ghcontrol/git_types.go +++ b/pkg/ghcontrol/git_types.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package ghcontrol import ( diff --git a/pkg/ghcontrol/notes.go b/pkg/ghcontrol/notes.go index a1515e65..48cd4a67 100644 --- a/pkg/ghcontrol/notes.go +++ b/pkg/ghcontrol/notes.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package ghcontrol import ( diff --git a/pkg/ghcontrol/notes_test.go b/pkg/ghcontrol/notes_test.go index dbda944c..0f383df8 100644 --- a/pkg/ghcontrol/notes_test.go +++ b/pkg/ghcontrol/notes_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package ghcontrol import ( diff --git a/pkg/ghcontrol/options.go b/pkg/ghcontrol/options.go index 9dc67bbf..484de303 100644 --- a/pkg/ghcontrol/options.go +++ b/pkg/ghcontrol/options.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package ghcontrol var defaultOptions = Options{ diff --git a/pkg/policy/marshalers.go b/pkg/policy/marshalers.go index 92701b44..c460c488 100644 --- a/pkg/policy/marshalers.go +++ b/pkg/policy/marshalers.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package policy import "encoding/json" diff --git a/pkg/policy/policy.go b/pkg/policy/policy.go index 9081bd2a..50f86119 100644 --- a/pkg/policy/policy.go +++ b/pkg/policy/policy.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package policy import ( diff --git a/pkg/policy/policy_test.go b/pkg/policy/policy_test.go index c607cfe9..16de6213 100644 --- a/pkg/policy/policy_test.go +++ b/pkg/policy/policy_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package policy import ( diff --git a/pkg/provenance/predicate.go b/pkg/provenance/predicate.go index 63af8413..c4b2abb5 100644 --- a/pkg/provenance/predicate.go +++ b/pkg/provenance/predicate.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package provenance import "encoding/json" diff --git a/pkg/repo/clone.go b/pkg/repo/clone.go index 62fff3f8..0bd35c51 100644 --- a/pkg/repo/clone.go +++ b/pkg/repo/clone.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package repo import ( diff --git a/pkg/repo/implementation.go b/pkg/repo/implementation.go index 79108348..aa9cd90b 100644 --- a/pkg/repo/implementation.go +++ b/pkg/repo/implementation.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + //go:generate go run github.com/maxbrunsfeld/counterfeiter/v6 -generate package repo diff --git a/pkg/repo/options/options.go b/pkg/repo/options/options.go index 0017739c..3c444266 100644 --- a/pkg/repo/options/options.go +++ b/pkg/repo/options/options.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package options import "errors" diff --git a/pkg/repo/options/options_test.go b/pkg/repo/options/options_test.go index 3d46eadb..d2240cb7 100644 --- a/pkg/repo/options/options_test.go +++ b/pkg/repo/options/options_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package options import ( diff --git a/pkg/repo/pullrequest.go b/pkg/repo/pullrequest.go index 9047459a..d531e2b9 100644 --- a/pkg/repo/pullrequest.go +++ b/pkg/repo/pullrequest.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package repo import ( diff --git a/pkg/slsa/slsa_types.go b/pkg/slsa/slsa_types.go index 3429afc0..776ee91e 100644 --- a/pkg/slsa/slsa_types.go +++ b/pkg/slsa/slsa_types.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package slsa import ( diff --git a/pkg/sourcetool/backends/attestation/notes/backend.go b/pkg/sourcetool/backends/attestation/notes/backend.go index 51488a7a..f5d4503e 100644 --- a/pkg/sourcetool/backends/attestation/notes/backend.go +++ b/pkg/sourcetool/backends/attestation/notes/backend.go @@ -1,6 +1,8 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + // Package notes implements an attestation storage backend that reads from // git commit notes - package notes import ( diff --git a/pkg/sourcetool/backends/vcs/github/github.go b/pkg/sourcetool/backends/vcs/github/github.go index c0e7f1ab..8814fa73 100644 --- a/pkg/sourcetool/backends/vcs/github/github.go +++ b/pkg/sourcetool/backends/vcs/github/github.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package github import ( diff --git a/pkg/sourcetool/backends/vcs/github/manage.go b/pkg/sourcetool/backends/vcs/github/manage.go index c24978d3..1cd67251 100644 --- a/pkg/sourcetool/backends/vcs/github/manage.go +++ b/pkg/sourcetool/backends/vcs/github/manage.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package github import ( diff --git a/pkg/sourcetool/implementation.go b/pkg/sourcetool/implementation.go index 1af62e5b..f7dee73c 100644 --- a/pkg/sourcetool/implementation.go +++ b/pkg/sourcetool/implementation.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package sourcetool import ( diff --git a/pkg/sourcetool/models/models.go b/pkg/sourcetool/models/models.go index ae2f610e..82868ac1 100644 --- a/pkg/sourcetool/models/models.go +++ b/pkg/sourcetool/models/models.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + //go:generate go run github.com/maxbrunsfeld/counterfeiter/v6 -generate package models diff --git a/pkg/sourcetool/options.go b/pkg/sourcetool/options.go index efb36fca..11622747 100644 --- a/pkg/sourcetool/options.go +++ b/pkg/sourcetool/options.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package sourcetool import ( diff --git a/pkg/sourcetool/options/options.go b/pkg/sourcetool/options/options.go index 2c4372c7..8e500d08 100644 --- a/pkg/sourcetool/options/options.go +++ b/pkg/sourcetool/options/options.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package options import ( diff --git a/pkg/sourcetool/tool.go b/pkg/sourcetool/tool.go index e28d2121..d4e37387 100644 --- a/pkg/sourcetool/tool.go +++ b/pkg/sourcetool/tool.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + //go:generate go run github.com/maxbrunsfeld/counterfeiter/v6 -generate package sourcetool diff --git a/pkg/sourcetool/tool_test.go b/pkg/sourcetool/tool_test.go index 6ffc2500..2eb91f69 100644 --- a/pkg/sourcetool/tool_test.go +++ b/pkg/sourcetool/tool_test.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package sourcetool import ( diff --git a/pkg/testsupport/mockverify.go b/pkg/testsupport/mockverify.go index 9b4bb5b5..6a01a92e 100644 --- a/pkg/testsupport/mockverify.go +++ b/pkg/testsupport/mockverify.go @@ -1,3 +1,6 @@ +// SPDX-FileCopyrightText: Copyright 2025 The SLSA Authors +// SPDX-License-Identifier: Apache-2.0 + package testsupport import (