diff --git a/build/container/container.go b/build/container/container.go
index 1afbe87b..e962a9f7 100644
--- a/build/container/container.go
+++ b/build/container/container.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package container provides routines to programmatically build container components of the project.
 package container
diff --git a/cmd/api/main.go b/cmd/api/main.go
index d65bc481..04d2dea6 100644
--- a/cmd/api/main.go
+++ b/cmd/api/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package main
 
diff --git a/cmd/gateway/main.go b/cmd/gateway/main.go
index 84801832..aa807387 100644
--- a/cmd/gateway/main.go
+++ b/cmd/gateway/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // gateway provides a simple HTTP server that redirects to the provided URI applying the configured policy.
 //
diff --git a/cmd/git_cache/main.go b/cmd/git_cache/main.go
index f6b7d52d..8165a9ac 100644
--- a/cmd/git_cache/main.go
+++ b/cmd/git_cache/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package main implements a git repo cache on GCS.
 //
diff --git a/cmd/gsutil_writeonly/main.go b/cmd/gsutil_writeonly/main.go
index cfa0b574..cf2da091 100644
--- a/cmd/gsutil_writeonly/main.go
+++ b/cmd/gsutil_writeonly/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package main
 
diff --git a/cmd/inference/main.go b/cmd/inference/main.go
index b2fb9599..42d9bff4 100644
--- a/cmd/inference/main.go
+++ b/cmd/inference/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package main
 
diff --git a/cmd/oss-rebuild/main.go b/cmd/oss-rebuild/main.go
index 6bd6a4fc..cae5188a 100644
--- a/cmd/oss-rebuild/main.go
+++ b/cmd/oss-rebuild/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package main
 
diff --git a/cmd/rebuilder/main.go b/cmd/rebuilder/main.go
index 9897e341..83a64774 100644
--- a/cmd/rebuilder/main.go
+++ b/cmd/rebuilder/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // main contains the smoketest rebuilder, which triggers a rebuild local to this binary (not GCB).
 package main
diff --git a/cmd/timewarp/main.go b/cmd/timewarp/main.go
index 56485c5b..e629f9a7 100644
--- a/cmd/timewarp/main.go
+++ b/cmd/timewarp/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // The timewarp binary serves the registry timewarp HTTP handler on a local port.
 package main
diff --git a/deployments/main.tf b/deployments/main.tf
index e0e9a28e..a449438b 100644
--- a/deployments/main.tf
+++ b/deployments/main.tf
@@ -1,16 +1,5 @@
-# Copyright 2024 The OSS Rebuild Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
+# Copyright 2025 Google LLC
+# SPDX-License-Identifier: Apache-2.0
 
 variable "project" {
   type = string
diff --git a/docs/_config.yml b/docs/_config.yml
index 27106282..6ba7dfba 100644
--- a/docs/_config.yml
+++ b/docs/_config.yml
@@ -1,16 +1,5 @@
-# Copyright 2024 The OSS Rebuild Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
+# Copyright 2025 Google LLC
+# SPDX-License-Identifier: Apache-2.0
 
 remote_theme: pages-themes/minimal@v0.2.0
 plugins:
diff --git a/internal/cache/cache.go b/internal/cache/cache.go
index 2de4453b..78d33a7a 100644
--- a/internal/cache/cache.go
+++ b/internal/cache/cache.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package cache provides an interface and implementations for caching.
 package cache
diff --git a/internal/cache/cache_test.go b/internal/cache/cache_test.go
index 8159c724..f3ee3f5e 100644
--- a/internal/cache/cache_test.go
+++ b/internal/cache/cache_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cache
 
diff --git a/internal/gateway/client.go b/internal/gateway/client.go
index eb6a0286..3f8ebb0d 100644
--- a/internal/gateway/client.go
+++ b/internal/gateway/client.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package gateway provides a client for the gateway service.
 package gateway
diff --git a/internal/gcb/gcb.go b/internal/gcb/gcb.go
index a5cc8acb..fbc503e5 100644
--- a/internal/gcb/gcb.go
+++ b/internal/gcb/gcb.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package gcb
 
diff --git a/internal/gitx/cache.go b/internal/gitx/cache.go
index 4d969371..c8239243 100644
--- a/internal/gitx/cache.go
+++ b/internal/gitx/cache.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package gitx
 
diff --git a/internal/gitx/clone.go b/internal/gitx/clone.go
index 2c8b47b1..5bbfa813 100644
--- a/internal/gitx/clone.go
+++ b/internal/gitx/clone.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package git provides rebuilder-specific git abstractions.
 package gitx
diff --git a/internal/gitx/storage.go b/internal/gitx/storage.go
index 79971814..1a2d59be 100644
--- a/internal/gitx/storage.go
+++ b/internal/gitx/storage.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package gitx
 
diff --git a/internal/hashext/hashext_test.go b/internal/hashext/hashext_test.go
index e864e7f6..d4e1c300 100644
--- a/internal/hashext/hashext_test.go
+++ b/internal/hashext/hashext_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package hashext
 
diff --git a/internal/hashext/multihash.go b/internal/hashext/multihash.go
index 4519bf74..206027b6 100644
--- a/internal/hashext/multihash.go
+++ b/internal/hashext/multihash.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package hashext
 
diff --git a/internal/hashext/typedhash.go b/internal/hashext/typedhash.go
index 97b5db75..f254939d 100644
--- a/internal/hashext/typedhash.go
+++ b/internal/hashext/typedhash.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package hashext provides extensions to the standard crypto/hash package.
 package hashext
diff --git a/internal/httpegress/httpegress.go b/internal/httpegress/httpegress.go
index 1b640d37..d057f073 100644
--- a/internal/httpegress/httpegress.go
+++ b/internal/httpegress/httpegress.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package httpegress provides a client constructor for building an HTTP Client for making requests to external services.
 package httpegress
diff --git a/internal/httpx/http.go b/internal/httpx/http.go
index 94b83c0c..456092ab 100644
--- a/internal/httpx/http.go
+++ b/internal/httpx/http.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package http provides a simpler http.Client abstraction and derivative uses.
 package httpx
diff --git a/internal/oauth/identity.go b/internal/oauth/identity.go
index 4e3b11e9..28afe540 100644
--- a/internal/oauth/identity.go
+++ b/internal/oauth/identity.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package oauth
 
diff --git a/internal/oauth/oauth.go b/internal/oauth/oauth.go
index a94cca29..7d7b8c13 100644
--- a/internal/oauth/oauth.go
+++ b/internal/oauth/oauth.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package oauth
 
diff --git a/internal/semver/semver.go b/internal/semver/semver.go
index b1eebe5f..27a05c33 100644
--- a/internal/semver/semver.go
+++ b/internal/semver/semver.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package semver implements the Semantic Versioning 2.0.0 spec.
 package semver
diff --git a/internal/semver/semver_test.go b/internal/semver/semver_test.go
index ba4d90b0..4c25d311 100644
--- a/internal/semver/semver_test.go
+++ b/internal/semver/semver_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package semver
 
diff --git a/internal/timewarp/timewarp.go b/internal/timewarp/timewarp.go
index 4eb84f0f..67a85753 100644
--- a/internal/timewarp/timewarp.go
+++ b/internal/timewarp/timewarp.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package timewarp implements a registry-fronting HTTP service that filters returned content by time.
 //
diff --git a/internal/uri/uri.go b/internal/uri/uri.go
index b953acfa..9fa3ca0c 100644
--- a/internal/uri/uri.go
+++ b/internal/uri/uri.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package uri
 
diff --git a/internal/uri/uri_test.go b/internal/uri/uri_test.go
index fa3b86c1..51c309e2 100644
--- a/internal/uri/uri_test.go
+++ b/internal/uri/uri_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package uri
 
diff --git a/internal/verifier/attestation.go b/internal/verifier/attestation.go
index 7c50f0c0..c0c64a08 100644
--- a/internal/verifier/attestation.go
+++ b/internal/verifier/attestation.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package verifier
 
diff --git a/internal/verifier/attestation_test.go b/internal/verifier/attestation_test.go
index fb2531ae..33c14f38 100644
--- a/internal/verifier/attestation_test.go
+++ b/internal/verifier/attestation_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package verifier
 
diff --git a/internal/verifier/attestor.go b/internal/verifier/attestor.go
index 27f7002d..0e714463 100644
--- a/internal/verifier/attestor.go
+++ b/internal/verifier/attestor.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package verifier
 
diff --git a/internal/verifier/intoto.go b/internal/verifier/intoto.go
index 304b0fec..68b35897 100644
--- a/internal/verifier/intoto.go
+++ b/internal/verifier/intoto.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package verifier
 
diff --git a/internal/verifier/summary.go b/internal/verifier/summary.go
index e24d11ba..5bbf58ae 100644
--- a/internal/verifier/summary.go
+++ b/internal/verifier/summary.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package verifier provides a library for verifying and attesting to a rebuild.
 package verifier
diff --git a/internal/verifier/summary_test.go b/internal/verifier/summary_test.go
index 5a3b79be..444fb44b 100644
--- a/internal/verifier/summary_test.go
+++ b/internal/verifier/summary_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package verifier
 
diff --git a/pkg/archive/archive.go b/pkg/archive/archive.go
index b4cac668..180172f2 100644
--- a/pkg/archive/archive.go
+++ b/pkg/archive/archive.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package archive
 
diff --git a/pkg/archive/common.go b/pkg/archive/common.go
index 1d4836b9..694bb55c 100644
--- a/pkg/archive/common.go
+++ b/pkg/archive/common.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package archive provides common types and functions for archive processing.
 package archive
diff --git a/pkg/archive/common_test.go b/pkg/archive/common_test.go
index 670a0324..a94a4e78 100644
--- a/pkg/archive/common_test.go
+++ b/pkg/archive/common_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package archive
 
diff --git a/pkg/archive/tar.go b/pkg/archive/tar.go
index 7edd690c..a87be349 100644
--- a/pkg/archive/tar.go
+++ b/pkg/archive/tar.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package archive
 
diff --git a/pkg/archive/tar_test.go b/pkg/archive/tar_test.go
index 6aaa6b68..9206529c 100644
--- a/pkg/archive/tar_test.go
+++ b/pkg/archive/tar_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package archive
 
diff --git a/pkg/archive/zip.go b/pkg/archive/zip.go
index aa99fd50..bdfe6868 100644
--- a/pkg/archive/zip.go
+++ b/pkg/archive/zip.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package archive
 
diff --git a/pkg/archive/zip_test.go b/pkg/archive/zip_test.go
index cdaee9cd..57df65ac 100644
--- a/pkg/archive/zip_test.go
+++ b/pkg/archive/zip_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package archive
 
diff --git a/pkg/builddef/set.go b/pkg/builddef/set.go
index 31e50b6c..6ca00a17 100644
--- a/pkg/builddef/set.go
+++ b/pkg/builddef/set.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package builddef
 
diff --git a/pkg/kmsdsse/kmsdsse.go b/pkg/kmsdsse/kmsdsse.go
index d45fb9bd..dab0282e 100644
--- a/pkg/kmsdsse/kmsdsse.go
+++ b/pkg/kmsdsse/kmsdsse.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package kmsdsse
 
diff --git a/pkg/rebuild/cratesio/infer.go b/pkg/rebuild/cratesio/infer.go
index 8c5869a6..7b369953 100644
--- a/pkg/rebuild/cratesio/infer.go
+++ b/pkg/rebuild/cratesio/infer.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/rebuild/cratesio/rebuild.go b/pkg/rebuild/cratesio/rebuild.go
index 4a7dddcc..fa665448 100644
--- a/pkg/rebuild/cratesio/rebuild.go
+++ b/pkg/rebuild/cratesio/rebuild.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/rebuild/cratesio/rebuild_test.go b/pkg/rebuild/cratesio/rebuild_test.go
index af6ea8dc..6370ed4b 100644
--- a/pkg/rebuild/cratesio/rebuild_test.go
+++ b/pkg/rebuild/cratesio/rebuild_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/rebuild/cratesio/strategy.go b/pkg/rebuild/cratesio/strategy.go
index c0d5dab7..3cf5f0ec 100644
--- a/pkg/rebuild/cratesio/strategy.go
+++ b/pkg/rebuild/cratesio/strategy.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/rebuild/cratesio/strategy_test.go b/pkg/rebuild/cratesio/strategy_test.go
index 254ef0fd..af404310 100644
--- a/pkg/rebuild/cratesio/strategy_test.go
+++ b/pkg/rebuild/cratesio/strategy_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/rebuild/debian/infer.go b/pkg/rebuild/debian/infer.go
index a74a4602..066100fc 100644
--- a/pkg/rebuild/debian/infer.go
+++ b/pkg/rebuild/debian/infer.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package debian
 
diff --git a/pkg/rebuild/debian/rebuild.go b/pkg/rebuild/debian/rebuild.go
index adde2fe4..6d40426f 100644
--- a/pkg/rebuild/debian/rebuild.go
+++ b/pkg/rebuild/debian/rebuild.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package debian
 
diff --git a/pkg/rebuild/debian/strategy.go b/pkg/rebuild/debian/strategy.go
index 93efc980..8abf554b 100644
--- a/pkg/rebuild/debian/strategy.go
+++ b/pkg/rebuild/debian/strategy.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package debian
 
diff --git a/pkg/rebuild/maven/infer.go b/pkg/rebuild/maven/infer.go
index 2f5635f2..df216b6b 100644
--- a/pkg/rebuild/maven/infer.go
+++ b/pkg/rebuild/maven/infer.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package maven
 
diff --git a/pkg/rebuild/maven/pom.go b/pkg/rebuild/maven/pom.go
index 925d6d34..a1a80f3e 100644
--- a/pkg/rebuild/maven/pom.go
+++ b/pkg/rebuild/maven/pom.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package maven
 
diff --git a/pkg/rebuild/maven/rebuild.go b/pkg/rebuild/maven/rebuild.go
index f52c90c0..d1c08533 100644
--- a/pkg/rebuild/maven/rebuild.go
+++ b/pkg/rebuild/maven/rebuild.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package maven
 
diff --git a/pkg/rebuild/maven/strategy.go b/pkg/rebuild/maven/strategy.go
index 3942d02a..c749a0d9 100644
--- a/pkg/rebuild/maven/strategy.go
+++ b/pkg/rebuild/maven/strategy.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package maven
 
diff --git a/pkg/rebuild/npm/infer.go b/pkg/rebuild/npm/infer.go
index dff76065..a4fe9e9a 100644
--- a/pkg/rebuild/npm/infer.go
+++ b/pkg/rebuild/npm/infer.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package npm
 
diff --git a/pkg/rebuild/npm/rebuild.go b/pkg/rebuild/npm/rebuild.go
index b2ece64d..734dbfed 100644
--- a/pkg/rebuild/npm/rebuild.go
+++ b/pkg/rebuild/npm/rebuild.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package npm
 
diff --git a/pkg/rebuild/npm/rebuild_test.go b/pkg/rebuild/npm/rebuild_test.go
index 0d350d07..dfa13042 100644
--- a/pkg/rebuild/npm/rebuild_test.go
+++ b/pkg/rebuild/npm/rebuild_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package npm
 
diff --git a/pkg/rebuild/npm/strategy.go b/pkg/rebuild/npm/strategy.go
index 47bb8a11..578057c9 100644
--- a/pkg/rebuild/npm/strategy.go
+++ b/pkg/rebuild/npm/strategy.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package npm
 
diff --git a/pkg/rebuild/npm/strategy_test.go b/pkg/rebuild/npm/strategy_test.go
index 61b4c505..de220c2f 100644
--- a/pkg/rebuild/npm/strategy_test.go
+++ b/pkg/rebuild/npm/strategy_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package npm
 
diff --git a/pkg/rebuild/pypi/infer.go b/pkg/rebuild/pypi/infer.go
index 352f2e01..a815a539 100644
--- a/pkg/rebuild/pypi/infer.go
+++ b/pkg/rebuild/pypi/infer.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package pypi
 
diff --git a/pkg/rebuild/pypi/rebuild.go b/pkg/rebuild/pypi/rebuild.go
index e4655c52..5e73193e 100644
--- a/pkg/rebuild/pypi/rebuild.go
+++ b/pkg/rebuild/pypi/rebuild.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package pypi
 
diff --git a/pkg/rebuild/pypi/rebuild_test.go b/pkg/rebuild/pypi/rebuild_test.go
index 54a92ca1..81811761 100644
--- a/pkg/rebuild/pypi/rebuild_test.go
+++ b/pkg/rebuild/pypi/rebuild_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package pypi
 
diff --git a/pkg/rebuild/pypi/strategy.go b/pkg/rebuild/pypi/strategy.go
index ccb47888..221238d4 100644
--- a/pkg/rebuild/pypi/strategy.go
+++ b/pkg/rebuild/pypi/strategy.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package pypi
 
diff --git a/pkg/rebuild/pypi/strategy_test.go b/pkg/rebuild/pypi/strategy_test.go
index dcdfa492..9509af01 100644
--- a/pkg/rebuild/pypi/strategy_test.go
+++ b/pkg/rebuild/pypi/strategy_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package pypi
 
diff --git a/pkg/rebuild/rebuild/compare.go b/pkg/rebuild/rebuild/compare.go
index 69ff0960..211c28a8 100644
--- a/pkg/rebuild/rebuild/compare.go
+++ b/pkg/rebuild/rebuild/compare.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package rebuild provides functionality to rebuild packages.
 package rebuild
diff --git a/pkg/rebuild/rebuild/context.go b/pkg/rebuild/rebuild/context.go
index 4bfebeb2..94a207ea 100644
--- a/pkg/rebuild/rebuild/context.go
+++ b/pkg/rebuild/rebuild/context.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package rebuild contains interfaces implementing generic rebuild functionality.
 package rebuild
diff --git a/pkg/rebuild/rebuild/git.go b/pkg/rebuild/rebuild/git.go
index 48c84d58..19416b00 100644
--- a/pkg/rebuild/rebuild/git.go
+++ b/pkg/rebuild/rebuild/git.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/http.go b/pkg/rebuild/rebuild/http.go
index 10d95c9c..af2e17d9 100644
--- a/pkg/rebuild/rebuild/http.go
+++ b/pkg/rebuild/rebuild/http.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/log.go b/pkg/rebuild/rebuild/log.go
index dec1774f..2ede1ecc 100644
--- a/pkg/rebuild/rebuild/log.go
+++ b/pkg/rebuild/rebuild/log.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/manualstrategy.go b/pkg/rebuild/rebuild/manualstrategy.go
index 40bcb1ba..e18c2de4 100644
--- a/pkg/rebuild/rebuild/manualstrategy.go
+++ b/pkg/rebuild/rebuild/manualstrategy.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/metadata.go b/pkg/rebuild/rebuild/metadata.go
index d4c9c629..4e333869 100644
--- a/pkg/rebuild/rebuild/metadata.go
+++ b/pkg/rebuild/rebuild/metadata.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/models.go b/pkg/rebuild/rebuild/models.go
index 8fe3572f..d3c4755d 100644
--- a/pkg/rebuild/rebuild/models.go
+++ b/pkg/rebuild/rebuild/models.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/rebuild.go b/pkg/rebuild/rebuild/rebuild.go
index b0f6f03b..a5f798a9 100644
--- a/pkg/rebuild/rebuild/rebuild.go
+++ b/pkg/rebuild/rebuild/rebuild.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/rebuildmany.go b/pkg/rebuild/rebuild/rebuildmany.go
index 4630b646..0509729e 100644
--- a/pkg/rebuild/rebuild/rebuildmany.go
+++ b/pkg/rebuild/rebuild/rebuildmany.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/rebuildone.go b/pkg/rebuild/rebuild/rebuildone.go
index 165f7c14..dcd98055 100644
--- a/pkg/rebuild/rebuild/rebuildone.go
+++ b/pkg/rebuild/rebuild/rebuildone.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/rebuildremote.go b/pkg/rebuild/rebuild/rebuildremote.go
index 14dbb004..31f222da 100644
--- a/pkg/rebuild/rebuild/rebuildremote.go
+++ b/pkg/rebuild/rebuild/rebuildremote.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/rebuildremote_test.go b/pkg/rebuild/rebuild/rebuildremote_test.go
index af0c2205..9e2d6428 100644
--- a/pkg/rebuild/rebuild/rebuildremote_test.go
+++ b/pkg/rebuild/rebuild/rebuildremote_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/registry.go b/pkg/rebuild/rebuild/registry.go
index 6916aab7..e2bbf4f6 100644
--- a/pkg/rebuild/rebuild/registry.go
+++ b/pkg/rebuild/rebuild/registry.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/storage.go b/pkg/rebuild/rebuild/storage.go
index 791f1fd9..9bd994c6 100644
--- a/pkg/rebuild/rebuild/storage.go
+++ b/pkg/rebuild/rebuild/storage.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/strategy.go b/pkg/rebuild/rebuild/strategy.go
index b6b627ce..9c055b54 100644
--- a/pkg/rebuild/rebuild/strategy.go
+++ b/pkg/rebuild/rebuild/strategy.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package rebuild
 
diff --git a/pkg/rebuild/rebuild/workflowstrategy.go b/pkg/rebuild/rebuild/workflowstrategy.go
index 4b0297c9..ed0edbf5 100644
--- a/pkg/rebuild/rebuild/workflowstrategy.go
+++ b/pkg/rebuild/rebuild/workflowstrategy.go
@@ -1,16 +1,6 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//	http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
+
 package rebuild
 
 import (
diff --git a/pkg/rebuild/schema/schema.go b/pkg/rebuild/schema/schema.go
index b619e04e..c0ee52a3 100644
--- a/pkg/rebuild/schema/schema.go
+++ b/pkg/rebuild/schema/schema.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package schema is a set of utilities for marshalling strategies.
 // Currently, schema only supports YAML but we may add protobuf in the future.
diff --git a/pkg/rebuild/schema/schema_test.go b/pkg/rebuild/schema/schema_test.go
index 78444a0a..87e8e9f6 100644
--- a/pkg/rebuild/schema/schema_test.go
+++ b/pkg/rebuild/schema/schema_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package schema
 
diff --git a/pkg/registry/cratesio/cargo.go b/pkg/registry/cratesio/cargo.go
index af787fa6..cab5512a 100644
--- a/pkg/registry/cratesio/cargo.go
+++ b/pkg/registry/cratesio/cargo.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/registry/cratesio/cratesio.go b/pkg/registry/cratesio/cratesio.go
index 41035f0a..cc9b8386 100644
--- a/pkg/registry/cratesio/cratesio.go
+++ b/pkg/registry/cratesio/cratesio.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package cratesio provides interfaces for interacting with the crates.io API and with Cargo-specific formats.
 package cratesio
diff --git a/pkg/registry/cratesio/cratesio_test.go b/pkg/registry/cratesio/cratesio_test.go
index 177a487e..f916f914 100644
--- a/pkg/registry/cratesio/cratesio_test.go
+++ b/pkg/registry/cratesio/cratesio_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/registry/cratesio/rust.go b/pkg/registry/cratesio/rust.go
index 44c98763..df5a0291 100644
--- a/pkg/registry/cratesio/rust.go
+++ b/pkg/registry/cratesio/rust.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/registry/cratesio/rust_test.go b/pkg/registry/cratesio/rust_test.go
index 6bed1206..d0b7d347 100644
--- a/pkg/registry/cratesio/rust_test.go
+++ b/pkg/registry/cratesio/rust_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package cratesio
 
diff --git a/pkg/registry/debian/debian.go b/pkg/registry/debian/debian.go
index 846d024e..4c0af039 100644
--- a/pkg/registry/debian/debian.go
+++ b/pkg/registry/debian/debian.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package debian
 
diff --git a/pkg/registry/debian/debian_test.go b/pkg/registry/debian/debian_test.go
index 065bbbb0..5ee8abc8 100644
--- a/pkg/registry/debian/debian_test.go
+++ b/pkg/registry/debian/debian_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package debian
 
diff --git a/pkg/registry/maven/maven.go b/pkg/registry/maven/maven.go
index b59098e1..64bf1def 100644
--- a/pkg/registry/maven/maven.go
+++ b/pkg/registry/maven/maven.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package maven provides an interface with Maven package registry and its API.
 package maven
diff --git a/pkg/registry/npm/npm.go b/pkg/registry/npm/npm.go
index 2070ef2b..ae272292 100644
--- a/pkg/registry/npm/npm.go
+++ b/pkg/registry/npm/npm.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package npm
 
diff --git a/pkg/registry/npm/npm_test.go b/pkg/registry/npm/npm_test.go
index aa1136ad..50572257 100644
--- a/pkg/registry/npm/npm_test.go
+++ b/pkg/registry/npm/npm_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package npm
 
diff --git a/pkg/registry/pypi/pypi.go b/pkg/registry/pypi/pypi.go
index e3b3c592..0567f49f 100644
--- a/pkg/registry/pypi/pypi.go
+++ b/pkg/registry/pypi/pypi.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package pypi describes the PyPi registry interface.
 package pypi
diff --git a/pkg/registry/pypi/pypi_test.go b/pkg/registry/pypi/pypi_test.go
index bab9f5bd..26ce3810 100644
--- a/pkg/registry/pypi/pypi_test.go
+++ b/pkg/registry/pypi/pypi_test.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package pypi
 
diff --git a/tools/benchmark/benchmark.go b/tools/benchmark/benchmark.go
index 9309f6f8..6fa17f9b 100644
--- a/tools/benchmark/benchmark.go
+++ b/tools/benchmark/benchmark.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package benchmark provides interfaces related to rebuild benchmarks.
 package benchmark
diff --git a/tools/benchmark/generate/main.go b/tools/benchmark/generate/main.go
index f2c130b1..90258779 100644
--- a/tools/benchmark/generate/main.go
+++ b/tools/benchmark/generate/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package main generates rebuild benchmark files from external data sources.
 package main
diff --git a/tools/ctl/ctl.go b/tools/ctl/ctl.go
index 804680eb..4ac5466d 100644
--- a/tools/ctl/ctl.go
+++ b/tools/ctl/ctl.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package main
 
diff --git a/tools/ctl/ide/logs.go b/tools/ctl/ide/logs.go
index af97f3b1..0dc44ee7 100644
--- a/tools/ctl/ide/logs.go
+++ b/tools/ctl/ide/logs.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package ide
 
diff --git a/tools/ctl/ide/rebuilder.go b/tools/ctl/ide/rebuilder.go
index bc427967..29e69a4a 100644
--- a/tools/ctl/ide/rebuilder.go
+++ b/tools/ctl/ide/rebuilder.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 package ide
 
diff --git a/tools/ctl/ide/ui.go b/tools/ctl/ide/ui.go
index ddddcade..f1135b7e 100644
--- a/tools/ctl/ide/ui.go
+++ b/tools/ctl/ide/ui.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package ide contains UI and state management code for the TUI rebuild debugger.
 package ide
diff --git a/tools/ctl/pipe/pipe.go b/tools/ctl/pipe/pipe.go
index da82c411..e5cc1790 100644
--- a/tools/ctl/pipe/pipe.go
+++ b/tools/ctl/pipe/pipe.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package pipe provides a simple way of applying transforms to a channel.
 package pipe
diff --git a/tools/ctl/rundex/rundex.go b/tools/ctl/rundex/rundex.go
index 07b59917..66d3c9b4 100644
--- a/tools/ctl/rundex/rundex.go
+++ b/tools/ctl/rundex/rundex.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package rundex provides access to metadata about runs and attempts.
 package rundex
diff --git a/tools/docker/docker.go b/tools/docker/docker.go
index 761890af..bb5f497b 100644
--- a/tools/docker/docker.go
+++ b/tools/docker/docker.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package docker contains container execution APIs.
 package docker
diff --git a/tools/indexscan/main.go b/tools/indexscan/main.go
index 9306bc5c..1c78e2b7 100644
--- a/tools/indexscan/main.go
+++ b/tools/indexscan/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package main implements a repo scanning tool to identify the best ref match for an upstream artifact.
 package main
diff --git a/tools/run_local/main.go b/tools/run_local/main.go
index 8e904798..efea5b74 100644
--- a/tools/run_local/main.go
+++ b/tools/run_local/main.go
@@ -1,16 +1,5 @@
-// Copyright 2024 The OSS Rebuild Authors
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//     http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
+// Copyright 2025 Google LLC
+// SPDX-License-Identifier: Apache-2.0
 
 // Package main builds and runs a rebuild server.
 package main