diff --git a/.release/ci.hcl b/.release/ci.hcl
index cb769975a..f9aeb2976 100644
--- a/.release/ci.hcl
+++ b/.release/ci.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 // Reference: https://github.com/hashicorp/crt-core-helloworld/blob/main/.release/ci.hcl (private repository)
 //
 // One way to validate this file, with a local build of the orchestrator (an internal repo):
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
index 8c168cbd7..8367ab9c2 100644
--- a/.release/security-scan.hcl
+++ b/.release/security-scan.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Reference: https://github.com/hashicorp/security-scanner/blob/main/CONFIG.md#binary (private repository)
 
 binary {
diff --git a/.release/terraform-provider-awscc-artifacts.hcl b/.release/terraform-provider-awscc-artifacts.hcl
index 390a0435b..cd9115aeb 100644
--- a/.release/terraform-provider-awscc-artifacts.hcl
+++ b/.release/terraform-provider-awscc-artifacts.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 schema = 1
 artifacts {
   zip = [