hashicorp · hashicorp-copywrite · Feb 24, 2025
diff --git a/accesskey-with-pgp/main.tf b/accesskey-with-pgp/main.tf
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 resource "aws_iam_access_key" "roger" {
   user    = "roger"
   pgp_key = "keybase:roger"

diff --git a/accesskey-without-pgp/main.tf b/accesskey-without-pgp/main.tf
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 resource "aws_iam_access_key" "roger" {
   user    = "roger"
 }
diff --git a/acm-certs/main.tf b/acm-certs/main.tf
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 variable "domain_1" {
   description = "domain of first Amazon Certificate Manager certificate"
 }

diff --git a/azure-modules-test/azure.auto.tfvars b/azure-modules-test/azure.auto.tfvars
@@ -1 +1,4 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 windows_dns_prefix = "rogerberlind-win"
diff --git a/azure-modules-test/main.tf b/azure-modules-test/main.tf
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 terraform {
   required_version = ">= 0.11.11"
 }

diff --git a/fake-modules-sentinel/check-module-versions.sentinel b/fake-modules-sentinel/check-module-versions.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "tfconfig"
 
 # Require all modules directly under root module

diff --git a/fake-modules-sentinel/mocks/mock-tfconfig-fake-modules.sentinel b/fake-modules-sentinel/mocks/mock-tfconfig-fake-modules.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 _root = {
 	"data": {},
 	"modules": {

diff --git a/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-fail.sentinel b/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-fail.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 _root = {
 	"data": {},
 	"modules": {

diff --git a/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-pass.sentinel b/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-pass.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 _root = {
 	"data": {},
 	"modules": {

diff --git a/gcp-instance/main.tf b/gcp-instance/main.tf
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 variable "gcp_project" {
   description = "GCP project name"
 }

diff --git a/lists-and-maps/main.tf b/lists-and-maps/main.tf
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # This is used to illustrate referencing lists and maps in Sentinel
 
 # ttl variable

diff --git a/mocks/mock-tfplan-require-access-keys-use-pgp.sentinel b/mocks/mock-tfplan-require-access-keys-use-pgp.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "strings"
 import "types"
 

diff --git a/mocks/mock-tfplan-restrict-gcp-instance-image.sentinel b/mocks/mock-tfplan-restrict-gcp-instance-image.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "strings"
 import "types"
 

diff --git a/mocks/mock-tfplan-restrict-vault-auth-methods.sentinel b/mocks/mock-tfplan-restrict-vault-auth-methods.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "strings"
 import "types"
 

diff --git a/mocks/mock-tfstate-restrict-acm-certificate-domains.sentinel b/mocks/mock-tfstate-restrict-acm-certificate-domains.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "strings"
 import "types"
 

diff --git a/require-modules-from-pmr/mocks/mock-tfconfig-azure-modules-test.sentinel b/require-modules-from-pmr/mocks/mock-tfconfig-azure-modules-test.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 _root = {
 	"data": {},
 	"modules": {

diff --git a/require-modules-from-pmr/require-modules-from-pmr.sentinel b/require-modules-from-pmr/require-modules-from-pmr.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "tfconfig"
 import "strings"
 

diff --git a/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-fail.sentinel b/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-fail.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 _root = {
 	"data": {},
 	"modules": {

diff --git a/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-pass.sentinel b/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-pass.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 _root = {
 	"data": {},
 	"modules": {

diff --git a/sentinel-policies/common-functions/module-functions/module-functions.sentinel b/sentinel-policies/common-functions/module-functions/module-functions.sentinel
@@ -1,5 +1,8 @@
 # Functions that use the tfconfig import to restrict modules
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 ##### Imports #####
 import "tfconfig/v2" as tfconfig
 import "strings"

diff --git a/sentinel-policies/common-functions/tfplan-functions/tfplan-functions.sentinel b/sentinel-policies/common-functions/tfplan-functions/tfplan-functions.sentinel
@@ -1,5 +1,8 @@
 # Common functions that use the tfplan/v2 import
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # The filter functions all accept a collection of resource changes, an attribute,
 # a value or a list of values, and a boolean, prtmsg, which can be true or false
 # and indicates whether the filter function should print violation messages.

diff --git a/sentinel-policies/common-functions/tfstate-functions/tfstate-functions.sentinel b/sentinel-policies/common-functions/tfstate-functions/tfstate-functions.sentinel
@@ -1,5 +1,8 @@
 # Common functions that use the tfstate/v2 import
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # The filter functions all accept a collection of resources, an attribute,
 # a value or a list of values, and a boolean, prtmsg, which can be true or false
 # and indicates whether the filter function should print violation messages.

diff --git a/sentinel-policies/original-policies.sentinel.hcl b/sentinel-policies/original-policies.sentinel.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 ## Exercise 1
 
 # restrict-vault-auth-methods.sentinel

diff --git a/sentinel-policies/prevent-auto-apply-in-production.sentinel b/sentinel-policies/prevent-auto-apply-in-production.sentinel
@@ -1,6 +1,9 @@
 # This policy uses the Sentinel tfrun import to prevent the use of auto-apply
 # in workspaces with names matching "^prod-(.*)" or "(.*)-prod$"
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 ##### Imports #####
 
 import "tfrun"

diff --git a/sentinel-policies/require-access-keys-use-pgp-a.sentinel b/sentinel-policies/require-access-keys-use-pgp-a.sentinel
@@ -1,5 +1,8 @@
 # This policy requires AWS IAM access keys to use PGP keys
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan

diff --git a/sentinel-policies/require-access-keys-use-pgp-b.sentinel b/sentinel-policies/require-access-keys-use-pgp-b.sentinel
@@ -1,5 +1,8 @@
 # This policy requires AWS IAM access keys to use PGP keys
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan

diff --git a/sentinel-policies/require-even-number.sentinel b/sentinel-policies/require-even-number.sentinel
@@ -1,5 +1,8 @@
 # A policy that requires an integer to be even
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # A parameter that must be set to an integer.
 param the_number default 1
 

diff --git a/sentinel-policies/require-modules-from-pmr-a.sentinel b/sentinel-policies/require-modules-from-pmr-a.sentinel
@@ -2,6 +2,9 @@
 # root module are in the Private Module Registry (PMR) of a TFC
 # organization.
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import the v2 tfplan import, but use the alias "tfplan"
 import "tfconfig/v2" as tfconfig
 

diff --git a/sentinel-policies/require-modules-from-pmr-b.sentinel b/sentinel-policies/require-modules-from-pmr-b.sentinel
@@ -2,6 +2,9 @@
 # root module are in the Private Module Registry (PMR) of a TFC
 # organization.
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import common-functions/module-functions/module-functions.sentinel
 # as "modules"
 import "module-functions" as modules

diff --git a/sentinel-policies/restrict-acm-certificate-domains-a.sentinel b/sentinel-policies/restrict-acm-certificate-domains-a.sentinel
@@ -1,6 +1,9 @@
 # This policy uses the tfstate import to restrict ACM certificates
 # to have domains that are sub-domains of hashidemos.io
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import common-functions/tfstate-functions/tfstate-functions.sentinel
 # with alias "state"
 import "tfstate-functions" as state

diff --git a/sentinel-policies/restrict-acm-certificate-domains-b.sentinel b/sentinel-policies/restrict-acm-certificate-domains-b.sentinel
@@ -1,6 +1,9 @@
 # This policy uses the tfstate import to restrict ACM certificates
 # to have domains that are sub-domains of hashidemos.io
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import common-functions/tfstate-functions/tfstate-functions.sentinel
 # with alias "state"
 import "tfstate-functions" as state

diff --git a/sentinel-policies/restrict-gcp-instance-image-a.sentinel b/sentinel-policies/restrict-gcp-instance-image-a.sentinel
@@ -1,5 +1,8 @@
 # This policy restricts the public images that GCP compute instances use
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan

diff --git a/sentinel-policies/restrict-gcp-instance-image-b.sentinel b/sentinel-policies/restrict-gcp-instance-image-b.sentinel
@@ -1,5 +1,8 @@
 # This policy restricts the public images that GCP compute instances use
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan

diff --git a/sentinel-policies/restrict-vault-auth-methods.sentinel b/sentinel-policies/restrict-vault-auth-methods.sentinel
@@ -1,5 +1,8 @@
 # This policy restricts which Vault auth methods can be created
 
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan

diff --git a/sentinel-policies/sentinel.hcl b/sentinel-policies/sentinel.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 module "tfplan-functions" {
     source = "./common-functions/tfplan-functions/tfplan-functions.sentinel"
 }

diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/fail-prefix.hcl b/sentinel-policies/test/prevent-auto-apply-in-production/fail-prefix.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 mock "tfrun" {
   module {
     source = "mock-tfrun-fail-prefix.sentinel"

diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/fail-suffix.hcl b/sentinel-policies/test/prevent-auto-apply-in-production/fail-suffix.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 mock "tfrun" {
   module {
     source = "mock-tfrun-fail-suffix.sentinel"

diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-prefix.sentinel b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-prefix.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "strings"
 import "types"
 

diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-suffix.sentinel b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-suffix.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "strings"
 import "types"
 

diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-prefix.sentinel b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-prefix.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "strings"
 import "types"
 

diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-suffix.sentinel b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-suffix.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 import "strings"
 import "types"
 

diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/pass-prefix.hcl b/sentinel-policies/test/prevent-auto-apply-in-production/pass-prefix.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 mock "tfrun" {
   module {
     source = "mock-tfrun-pass-prefix.sentinel"

diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/pass-suffix.hcl b/sentinel-policies/test/prevent-auto-apply-in-production/pass-suffix.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 mock "tfrun" {
   module {
     source = "mock-tfrun-pass-suffix.sentinel"

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-invalid-value.hcl b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-invalid-value.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-missing-value.hcl b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-missing-value.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-with-null.hcl b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-with-null.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-invalid-value.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-invalid-value.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 terraform_version = "0.12.3"
 
 planned_values = {

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-missing-value.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-missing-value.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 terraform_version = "0.12.3"
 
 planned_values = {

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-with-null.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-with-null.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 terraform_version = "0.12.3"
 
 planned_values = {

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-pass.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-pass.sentinel
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 terraform_version = "0.12.24"
 
 planned_values = {

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/pass.hcl b/sentinel-policies/test/require-access-keys-use-pgp-a/pass.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }

diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/fail-invalid-value.hcl b/sentinel-policies/test/require-access-keys-use-pgp-b/fail-invalid-value.hcl
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }