From 4a137b7a98798de00ea5f87307e4b5ea6cedff24 Mon Sep 17 00:00:00 2001
From: "hashicorp-copywrite[bot]"
 <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>
Date: Mon, 11 May 2026 04:41:00 +0000
Subject: [PATCH] [COMPLIANCE] Add/Update Copyright Headers

---
 LICENSE                                                         | 2 +-
 accesskey-with-pgp/main.tf                                      | 2 ++
 accesskey-without-pgp/main.tf                                   | 2 ++
 acm-certs/main.tf                                               | 2 ++
 azure-modules-test/azure.auto.tfvars                            | 2 ++
 azure-modules-test/main.tf                                      | 2 ++
 fake-modules-sentinel/check-module-versions.sentinel            | 2 ++
 fake-modules-sentinel/mocks/mock-tfconfig-fake-modules.sentinel | 2 ++
 .../test/check-module-versions/mock-tfconfig-fail.sentinel      | 2 ++
 .../test/check-module-versions/mock-tfconfig-pass.sentinel      | 2 ++
 gcp-instance/main.tf                                            | 2 ++
 lists-and-maps/main.tf                                          | 2 ++
 mocks/mock-tfplan-require-access-keys-use-pgp.sentinel          | 2 ++
 mocks/mock-tfplan-restrict-gcp-instance-image.sentinel          | 2 ++
 mocks/mock-tfplan-restrict-vault-auth-methods.sentinel          | 2 ++
 mocks/mock-tfstate-restrict-acm-certificate-domains.sentinel    | 2 ++
 .../mocks/mock-tfconfig-azure-modules-test.sentinel             | 2 ++
 require-modules-from-pmr/require-modules-from-pmr.sentinel      | 2 ++
 .../test/require-modules-from-pmr/mock-tfconfig-fail.sentinel   | 2 ++
 .../test/require-modules-from-pmr/mock-tfconfig-pass.sentinel   | 2 ++
 .../common-functions/module-functions/module-functions.sentinel | 2 ++
 .../common-functions/tfplan-functions/tfplan-functions.sentinel | 2 ++
 .../tfstate-functions/tfstate-functions.sentinel                | 2 ++
 sentinel-policies/original-policies.sentinel.hcl                | 2 ++
 sentinel-policies/prevent-auto-apply-in-production.sentinel     | 2 ++
 sentinel-policies/require-access-keys-use-pgp-a.sentinel        | 2 ++
 sentinel-policies/require-access-keys-use-pgp-b.sentinel        | 2 ++
 sentinel-policies/require-even-number.sentinel                  | 2 ++
 sentinel-policies/require-modules-from-pmr-a.sentinel           | 2 ++
 sentinel-policies/require-modules-from-pmr-b.sentinel           | 2 ++
 sentinel-policies/restrict-acm-certificate-domains-a.sentinel   | 2 ++
 sentinel-policies/restrict-acm-certificate-domains-b.sentinel   | 2 ++
 sentinel-policies/restrict-gcp-instance-image-a.sentinel        | 2 ++
 sentinel-policies/restrict-gcp-instance-image-b.sentinel        | 2 ++
 sentinel-policies/restrict-vault-auth-methods.sentinel          | 2 ++
 sentinel-policies/sentinel.hcl                                  | 2 ++
 .../test/prevent-auto-apply-in-production/fail-prefix.hcl       | 2 ++
 .../test/prevent-auto-apply-in-production/fail-suffix.hcl       | 2 ++
 .../mock-tfrun-fail-prefix.sentinel                             | 2 ++
 .../mock-tfrun-fail-suffix.sentinel                             | 2 ++
 .../mock-tfrun-pass-prefix.sentinel                             | 2 ++
 .../mock-tfrun-pass-suffix.sentinel                             | 2 ++
 .../test/prevent-auto-apply-in-production/pass-prefix.hcl       | 2 ++
 .../test/prevent-auto-apply-in-production/pass-suffix.hcl       | 2 ++
 .../test/require-access-keys-use-pgp-a/fail-invalid-value.hcl   | 2 ++
 .../test/require-access-keys-use-pgp-a/fail-missing-value.hcl   | 2 ++
 .../test/require-access-keys-use-pgp-a/fail-with-null.hcl       | 2 ++
 .../mock-tfplan-fail-invalid-value.sentinel                     | 2 ++
 .../mock-tfplan-fail-missing-value.sentinel                     | 2 ++
 .../mock-tfplan-fail-with-null.sentinel                         | 2 ++
 .../require-access-keys-use-pgp-a/mock-tfplan-pass.sentinel     | 2 ++
 sentinel-policies/test/require-access-keys-use-pgp-a/pass.hcl   | 2 ++
 .../test/require-access-keys-use-pgp-b/fail-invalid-value.hcl   | 2 ++
 .../test/require-access-keys-use-pgp-b/fail-missing-value.hcl   | 2 ++
 .../test/require-access-keys-use-pgp-b/fail-with-null.hcl       | 2 ++
 .../mock-tfplan-fail-invalid-value.sentinel                     | 2 ++
 .../mock-tfplan-fail-missing-value.sentinel                     | 2 ++
 .../mock-tfplan-fail-with-null.sentinel                         | 2 ++
 .../require-access-keys-use-pgp-b/mock-tfplan-pass.sentinel     | 2 ++
 sentinel-policies/test/require-access-keys-use-pgp-b/pass.hcl   | 2 ++
 sentinel-policies/test/require-even-number/fail.hcl             | 2 ++
 sentinel-policies/test/require-even-number/pass.hcl             | 2 ++
 sentinel-policies/test/require-modules-from-pmr-a/fail.hcl      | 2 ++
 .../test/require-modules-from-pmr-a/mock-tfconfig-fail.sentinel | 2 ++
 .../test/require-modules-from-pmr-a/mock-tfconfig-pass.sentinel | 2 ++
 sentinel-policies/test/require-modules-from-pmr-a/pass.hcl      | 2 ++
 sentinel-policies/test/require-modules-from-pmr-b/fail.hcl      | 2 ++
 .../test/require-modules-from-pmr-b/mock-tfconfig-fail.sentinel | 2 ++
 .../test/require-modules-from-pmr-b/mock-tfconfig-pass.sentinel | 2 ++
 sentinel-policies/test/require-modules-from-pmr-b/pass.hcl      | 2 ++
 .../test/restrict-acm-certificate-domains-a/fail.hcl            | 2 ++
 .../mock-tfstate-fail.sentinel                                  | 2 ++
 .../mock-tfstate-pass.sentinel                                  | 2 ++
 .../test/restrict-acm-certificate-domains-a/pass.hcl            | 2 ++
 .../test/restrict-acm-certificate-domains-b/fail.hcl            | 2 ++
 .../mock-tfstate-fail.sentinel                                  | 2 ++
 .../mock-tfstate-pass.sentinel                                  | 2 ++
 .../test/restrict-acm-certificate-domains-b/pass.hcl            | 2 ++
 .../test/restrict-gcp-instance-image-a/fail-invalid-image.hcl   | 2 ++
 .../restrict-gcp-instance-image-a/fail-no-initialize-params.hcl | 2 ++
 .../mock-tfplan-fail-invalid-image.sentinel                     | 2 ++
 .../mock-tfplan-fail-no-initialize-params.sentinel              | 2 ++
 .../restrict-gcp-instance-image-a/mock-tfplan-pass.sentinel     | 2 ++
 sentinel-policies/test/restrict-gcp-instance-image-a/pass.hcl   | 2 ++
 .../test/restrict-gcp-instance-image-b/fail-invalid-image.hcl   | 2 ++
 .../restrict-gcp-instance-image-b/fail-no-initialize-params.hcl | 2 ++
 .../mock-tfplan-fail-invalid-image.sentinel                     | 2 ++
 .../mock-tfplan-fail-no-initialize-params.sentinel              | 2 ++
 .../restrict-gcp-instance-image-b/mock-tfplan-pass.sentinel     | 2 ++
 sentinel-policies/test/restrict-gcp-instance-image-b/pass.hcl   | 2 ++
 sentinel-policies/test/restrict-vault-auth-methods/fail.hcl     | 2 ++
 .../test/restrict-vault-auth-methods/mock-tfplan-fail.sentinel  | 2 ++
 .../test/restrict-vault-auth-methods/mock-tfplan-pass.sentinel  | 2 ++
 sentinel-policies/test/restrict-vault-auth-methods/pass.hcl     | 2 ++
 vault-auth-methods/main.tf                                      | 2 ++
 vault-auth-methods/vault.auto.tfvars                            | 2 ++
 96 files changed, 191 insertions(+), 1 deletion(-)

diff --git a/LICENSE b/LICENSE
index 1b62697..33796a1 100644
--- a/LICENSE
+++ b/LICENSE
@@ -1,4 +1,4 @@
-Copyright IBM Corp. 2022, 2023
+Copyright IBM Corp. 2022, 2026
 
 Mozilla Public License Version 2.0
 ==================================
diff --git a/accesskey-with-pgp/main.tf b/accesskey-with-pgp/main.tf
index b279a03..751b739 100644
--- a/accesskey-with-pgp/main.tf
+++ b/accesskey-with-pgp/main.tf
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 resource "aws_iam_access_key" "roger" {
   user    = "roger"
   pgp_key = "keybase:roger"
diff --git a/accesskey-without-pgp/main.tf b/accesskey-without-pgp/main.tf
index b789397..731214a 100644
--- a/accesskey-without-pgp/main.tf
+++ b/accesskey-without-pgp/main.tf
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 resource "aws_iam_access_key" "roger" {
   user    = "roger"
 }
diff --git a/acm-certs/main.tf b/acm-certs/main.tf
index 3bc2814..6b89fc6 100644
--- a/acm-certs/main.tf
+++ b/acm-certs/main.tf
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 variable "domain_1" {
   description = "domain of first Amazon Certificate Manager certificate"
 }
diff --git a/azure-modules-test/azure.auto.tfvars b/azure-modules-test/azure.auto.tfvars
index 6307e4e..18e0364 100644
--- a/azure-modules-test/azure.auto.tfvars
+++ b/azure-modules-test/azure.auto.tfvars
@@ -1 +1,3 @@
+# Copyright IBM Corp. 2022, 2026
+
 windows_dns_prefix = "rogerberlind-win"
diff --git a/azure-modules-test/main.tf b/azure-modules-test/main.tf
index 321ad9d..b36bc57 100644
--- a/azure-modules-test/main.tf
+++ b/azure-modules-test/main.tf
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform {
   required_version = ">= 0.11.11"
 }
diff --git a/fake-modules-sentinel/check-module-versions.sentinel b/fake-modules-sentinel/check-module-versions.sentinel
index 2ed7e17..4279be3 100644
--- a/fake-modules-sentinel/check-module-versions.sentinel
+++ b/fake-modules-sentinel/check-module-versions.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "tfconfig"
 
 # Require all modules directly under root module
diff --git a/fake-modules-sentinel/mocks/mock-tfconfig-fake-modules.sentinel b/fake-modules-sentinel/mocks/mock-tfconfig-fake-modules.sentinel
index 03dc1b2..69dc884 100644
--- a/fake-modules-sentinel/mocks/mock-tfconfig-fake-modules.sentinel
+++ b/fake-modules-sentinel/mocks/mock-tfconfig-fake-modules.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 _root = {
 	"data": {},
 	"modules": {
diff --git a/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-fail.sentinel b/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-fail.sentinel
index 90c8968..316b41b 100644
--- a/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-fail.sentinel
+++ b/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-fail.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 _root = {
 	"data": {},
 	"modules": {
diff --git a/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-pass.sentinel b/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-pass.sentinel
index 03dc1b2..69dc884 100644
--- a/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-pass.sentinel
+++ b/fake-modules-sentinel/test/check-module-versions/mock-tfconfig-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 _root = {
 	"data": {},
 	"modules": {
diff --git a/gcp-instance/main.tf b/gcp-instance/main.tf
index a07a1d9..198320e 100644
--- a/gcp-instance/main.tf
+++ b/gcp-instance/main.tf
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 variable "gcp_project" {
   description = "GCP project name"
 }
diff --git a/lists-and-maps/main.tf b/lists-and-maps/main.tf
index 770b5e1..37af73e 100644
--- a/lists-and-maps/main.tf
+++ b/lists-and-maps/main.tf
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 # This is used to illustrate referencing lists and maps in Sentinel
 
 # ttl variable
diff --git a/mocks/mock-tfplan-require-access-keys-use-pgp.sentinel b/mocks/mock-tfplan-require-access-keys-use-pgp.sentinel
index 3d408e8..04ac099 100644
--- a/mocks/mock-tfplan-require-access-keys-use-pgp.sentinel
+++ b/mocks/mock-tfplan-require-access-keys-use-pgp.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 import "types"
 
diff --git a/mocks/mock-tfplan-restrict-gcp-instance-image.sentinel b/mocks/mock-tfplan-restrict-gcp-instance-image.sentinel
index 353f289..3233c20 100644
--- a/mocks/mock-tfplan-restrict-gcp-instance-image.sentinel
+++ b/mocks/mock-tfplan-restrict-gcp-instance-image.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 import "types"
 
diff --git a/mocks/mock-tfplan-restrict-vault-auth-methods.sentinel b/mocks/mock-tfplan-restrict-vault-auth-methods.sentinel
index 562a21b..d70bd26 100644
--- a/mocks/mock-tfplan-restrict-vault-auth-methods.sentinel
+++ b/mocks/mock-tfplan-restrict-vault-auth-methods.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 import "types"
 
diff --git a/mocks/mock-tfstate-restrict-acm-certificate-domains.sentinel b/mocks/mock-tfstate-restrict-acm-certificate-domains.sentinel
index d172002..e7b4af0 100644
--- a/mocks/mock-tfstate-restrict-acm-certificate-domains.sentinel
+++ b/mocks/mock-tfstate-restrict-acm-certificate-domains.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 import "types"
 
diff --git a/require-modules-from-pmr/mocks/mock-tfconfig-azure-modules-test.sentinel b/require-modules-from-pmr/mocks/mock-tfconfig-azure-modules-test.sentinel
index 289871f..711ac72 100644
--- a/require-modules-from-pmr/mocks/mock-tfconfig-azure-modules-test.sentinel
+++ b/require-modules-from-pmr/mocks/mock-tfconfig-azure-modules-test.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 _root = {
 	"data": {},
 	"modules": {
diff --git a/require-modules-from-pmr/require-modules-from-pmr.sentinel b/require-modules-from-pmr/require-modules-from-pmr.sentinel
index 167240d..d9f531b 100644
--- a/require-modules-from-pmr/require-modules-from-pmr.sentinel
+++ b/require-modules-from-pmr/require-modules-from-pmr.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "tfconfig"
 import "strings"
 
diff --git a/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-fail.sentinel b/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-fail.sentinel
index 91616a7..f75f433 100644
--- a/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-fail.sentinel
+++ b/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-fail.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 _root = {
 	"data": {},
 	"modules": {
diff --git a/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-pass.sentinel b/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-pass.sentinel
index 289871f..711ac72 100644
--- a/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-pass.sentinel
+++ b/require-modules-from-pmr/test/require-modules-from-pmr/mock-tfconfig-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 _root = {
 	"data": {},
 	"modules": {
diff --git a/sentinel-policies/common-functions/module-functions/module-functions.sentinel b/sentinel-policies/common-functions/module-functions/module-functions.sentinel
index b34f1ea..c3058a5 100644
--- a/sentinel-policies/common-functions/module-functions/module-functions.sentinel
+++ b/sentinel-policies/common-functions/module-functions/module-functions.sentinel
@@ -1,5 +1,7 @@
 # Functions that use the tfconfig import to restrict modules
 
+# Copyright IBM Corp. 2022, 2026
+
 ##### Imports #####
 import "tfconfig/v2" as tfconfig
 import "strings"
diff --git a/sentinel-policies/common-functions/tfplan-functions/tfplan-functions.sentinel b/sentinel-policies/common-functions/tfplan-functions/tfplan-functions.sentinel
index b5287d7..5a203b7 100644
--- a/sentinel-policies/common-functions/tfplan-functions/tfplan-functions.sentinel
+++ b/sentinel-policies/common-functions/tfplan-functions/tfplan-functions.sentinel
@@ -1,5 +1,7 @@
 # Common functions that use the tfplan/v2 import
 
+# Copyright IBM Corp. 2022, 2026
+
 # The filter functions all accept a collection of resource changes, an attribute,
 # a value or a list of values, and a boolean, prtmsg, which can be true or false
 # and indicates whether the filter function should print violation messages.
diff --git a/sentinel-policies/common-functions/tfstate-functions/tfstate-functions.sentinel b/sentinel-policies/common-functions/tfstate-functions/tfstate-functions.sentinel
index cf184fb..58ec25f 100644
--- a/sentinel-policies/common-functions/tfstate-functions/tfstate-functions.sentinel
+++ b/sentinel-policies/common-functions/tfstate-functions/tfstate-functions.sentinel
@@ -1,5 +1,7 @@
 # Common functions that use the tfstate/v2 import
 
+# Copyright IBM Corp. 2022, 2026
+
 # The filter functions all accept a collection of resources, an attribute,
 # a value or a list of values, and a boolean, prtmsg, which can be true or false
 # and indicates whether the filter function should print violation messages.
diff --git a/sentinel-policies/original-policies.sentinel.hcl b/sentinel-policies/original-policies.sentinel.hcl
index 20140ec..57bf4f2 100644
--- a/sentinel-policies/original-policies.sentinel.hcl
+++ b/sentinel-policies/original-policies.sentinel.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 ## Exercise 1
 
 # restrict-vault-auth-methods.sentinel
diff --git a/sentinel-policies/prevent-auto-apply-in-production.sentinel b/sentinel-policies/prevent-auto-apply-in-production.sentinel
index 3f9af70..faf0747 100644
--- a/sentinel-policies/prevent-auto-apply-in-production.sentinel
+++ b/sentinel-policies/prevent-auto-apply-in-production.sentinel
@@ -1,6 +1,8 @@
 # This policy uses the Sentinel tfrun import to prevent the use of auto-apply
 # in workspaces with names matching "^prod-(.*)" or "(.*)-prod$"
 
+# Copyright IBM Corp. 2022, 2026
+
 ##### Imports #####
 
 import "tfrun"
diff --git a/sentinel-policies/require-access-keys-use-pgp-a.sentinel b/sentinel-policies/require-access-keys-use-pgp-a.sentinel
index ffa8290..b3d7fc0 100644
--- a/sentinel-policies/require-access-keys-use-pgp-a.sentinel
+++ b/sentinel-policies/require-access-keys-use-pgp-a.sentinel
@@ -1,5 +1,7 @@
 # This policy requires AWS IAM access keys to use PGP keys
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan
diff --git a/sentinel-policies/require-access-keys-use-pgp-b.sentinel b/sentinel-policies/require-access-keys-use-pgp-b.sentinel
index 34a558b..8376b92 100644
--- a/sentinel-policies/require-access-keys-use-pgp-b.sentinel
+++ b/sentinel-policies/require-access-keys-use-pgp-b.sentinel
@@ -1,5 +1,7 @@
 # This policy requires AWS IAM access keys to use PGP keys
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan
diff --git a/sentinel-policies/require-even-number.sentinel b/sentinel-policies/require-even-number.sentinel
index ec7666f..95d51fd 100644
--- a/sentinel-policies/require-even-number.sentinel
+++ b/sentinel-policies/require-even-number.sentinel
@@ -1,5 +1,7 @@
 # A policy that requires an integer to be even
 
+# Copyright IBM Corp. 2022, 2026
+
 # A parameter that must be set to an integer.
 param the_number default 1
 
diff --git a/sentinel-policies/require-modules-from-pmr-a.sentinel b/sentinel-policies/require-modules-from-pmr-a.sentinel
index d092544..9848c6f 100644
--- a/sentinel-policies/require-modules-from-pmr-a.sentinel
+++ b/sentinel-policies/require-modules-from-pmr-a.sentinel
@@ -2,6 +2,8 @@
 # root module are in the Private Module Registry (PMR) of a TFC
 # organization.
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import the v2 tfplan import, but use the alias "tfplan"
 import "tfconfig/v2" as tfconfig
 
diff --git a/sentinel-policies/require-modules-from-pmr-b.sentinel b/sentinel-policies/require-modules-from-pmr-b.sentinel
index c3b6784..6e091ae 100644
--- a/sentinel-policies/require-modules-from-pmr-b.sentinel
+++ b/sentinel-policies/require-modules-from-pmr-b.sentinel
@@ -2,6 +2,8 @@
 # root module are in the Private Module Registry (PMR) of a TFC
 # organization.
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import common-functions/module-functions/module-functions.sentinel
 # as "modules"
 import "module-functions" as modules
diff --git a/sentinel-policies/restrict-acm-certificate-domains-a.sentinel b/sentinel-policies/restrict-acm-certificate-domains-a.sentinel
index 4f5ab82..908c599 100644
--- a/sentinel-policies/restrict-acm-certificate-domains-a.sentinel
+++ b/sentinel-policies/restrict-acm-certificate-domains-a.sentinel
@@ -1,6 +1,8 @@
 # This policy uses the tfstate import to restrict ACM certificates
 # to have domains that are sub-domains of hashidemos.io
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import common-functions/tfstate-functions/tfstate-functions.sentinel
 # with alias "state"
 import "tfstate-functions" as state
diff --git a/sentinel-policies/restrict-acm-certificate-domains-b.sentinel b/sentinel-policies/restrict-acm-certificate-domains-b.sentinel
index a3e28ee..d53afa5 100644
--- a/sentinel-policies/restrict-acm-certificate-domains-b.sentinel
+++ b/sentinel-policies/restrict-acm-certificate-domains-b.sentinel
@@ -1,6 +1,8 @@
 # This policy uses the tfstate import to restrict ACM certificates
 # to have domains that are sub-domains of hashidemos.io
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import common-functions/tfstate-functions/tfstate-functions.sentinel
 # with alias "state"
 import "tfstate-functions" as state
diff --git a/sentinel-policies/restrict-gcp-instance-image-a.sentinel b/sentinel-policies/restrict-gcp-instance-image-a.sentinel
index 2babcd2..c5179e8 100644
--- a/sentinel-policies/restrict-gcp-instance-image-a.sentinel
+++ b/sentinel-policies/restrict-gcp-instance-image-a.sentinel
@@ -1,5 +1,7 @@
 # This policy restricts the public images that GCP compute instances use
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan
diff --git a/sentinel-policies/restrict-gcp-instance-image-b.sentinel b/sentinel-policies/restrict-gcp-instance-image-b.sentinel
index 2e6de7b..53804fe 100644
--- a/sentinel-policies/restrict-gcp-instance-image-b.sentinel
+++ b/sentinel-policies/restrict-gcp-instance-image-b.sentinel
@@ -1,5 +1,7 @@
 # This policy restricts the public images that GCP compute instances use
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan
diff --git a/sentinel-policies/restrict-vault-auth-methods.sentinel b/sentinel-policies/restrict-vault-auth-methods.sentinel
index 67b5528..3f6a93f 100644
--- a/sentinel-policies/restrict-vault-auth-methods.sentinel
+++ b/sentinel-policies/restrict-vault-auth-methods.sentinel
@@ -1,5 +1,7 @@
 # This policy restricts which Vault auth methods can be created
 
+# Copyright IBM Corp. 2022, 2026
+
 # Import common-functions/tfplan-functions/tfplan-functions.sentinel
 # with alias "plan"
 import "tfplan-functions" as plan
diff --git a/sentinel-policies/sentinel.hcl b/sentinel-policies/sentinel.hcl
index 79ca7ca..1d87c7a 100644
--- a/sentinel-policies/sentinel.hcl
+++ b/sentinel-policies/sentinel.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
     source = "./common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/fail-prefix.hcl b/sentinel-policies/test/prevent-auto-apply-in-production/fail-prefix.hcl
index a77f8ae..26dad5b 100644
--- a/sentinel-policies/test/prevent-auto-apply-in-production/fail-prefix.hcl
+++ b/sentinel-policies/test/prevent-auto-apply-in-production/fail-prefix.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 mock "tfrun" {
   module {
     source = "mock-tfrun-fail-prefix.sentinel"
diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/fail-suffix.hcl b/sentinel-policies/test/prevent-auto-apply-in-production/fail-suffix.hcl
index 425f336..2d2638e 100644
--- a/sentinel-policies/test/prevent-auto-apply-in-production/fail-suffix.hcl
+++ b/sentinel-policies/test/prevent-auto-apply-in-production/fail-suffix.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 mock "tfrun" {
   module {
     source = "mock-tfrun-fail-suffix.sentinel"
diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-prefix.sentinel b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-prefix.sentinel
index 87bc32c..e8d5215 100644
--- a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-prefix.sentinel
+++ b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-prefix.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 import "types"
 
diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-suffix.sentinel b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-suffix.sentinel
index c9a46c5..39e31ef 100644
--- a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-suffix.sentinel
+++ b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-fail-suffix.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 import "types"
 
diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-prefix.sentinel b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-prefix.sentinel
index 54f2166..da6f8fc 100644
--- a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-prefix.sentinel
+++ b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-prefix.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 import "types"
 
diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-suffix.sentinel b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-suffix.sentinel
index cfa69fa..b5516f0 100644
--- a/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-suffix.sentinel
+++ b/sentinel-policies/test/prevent-auto-apply-in-production/mock-tfrun-pass-suffix.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 import "types"
 
diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/pass-prefix.hcl b/sentinel-policies/test/prevent-auto-apply-in-production/pass-prefix.hcl
index f739a43..1b0c818 100644
--- a/sentinel-policies/test/prevent-auto-apply-in-production/pass-prefix.hcl
+++ b/sentinel-policies/test/prevent-auto-apply-in-production/pass-prefix.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 mock "tfrun" {
   module {
     source = "mock-tfrun-pass-prefix.sentinel"
diff --git a/sentinel-policies/test/prevent-auto-apply-in-production/pass-suffix.hcl b/sentinel-policies/test/prevent-auto-apply-in-production/pass-suffix.hcl
index dc3cdb4..6e6bcbc 100644
--- a/sentinel-policies/test/prevent-auto-apply-in-production/pass-suffix.hcl
+++ b/sentinel-policies/test/prevent-auto-apply-in-production/pass-suffix.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 mock "tfrun" {
   module {
     source = "mock-tfrun-pass-suffix.sentinel"
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-invalid-value.hcl b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-invalid-value.hcl
index 8a9db02..7b27c16 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-invalid-value.hcl
+++ b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-invalid-value.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-missing-value.hcl b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-missing-value.hcl
index 4ed23fa..3a0661a 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-missing-value.hcl
+++ b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-missing-value.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-with-null.hcl b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-with-null.hcl
index d4c6349..4005ef0 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-a/fail-with-null.hcl
+++ b/sentinel-policies/test/require-access-keys-use-pgp-a/fail-with-null.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-invalid-value.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-invalid-value.sentinel
index aa59ce0..de50f5e 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-invalid-value.sentinel
+++ b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-invalid-value.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 planned_values = {
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-missing-value.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-missing-value.sentinel
index 68c684f..8500146 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-missing-value.sentinel
+++ b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-missing-value.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 planned_values = {
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-with-null.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-with-null.sentinel
index e26c59e..8804caa 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-with-null.sentinel
+++ b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-fail-with-null.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 planned_values = {
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-pass.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-pass.sentinel
index 86f6fc9..2fdd807 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-pass.sentinel
+++ b/sentinel-policies/test/require-access-keys-use-pgp-a/mock-tfplan-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-a/pass.hcl b/sentinel-policies/test/require-access-keys-use-pgp-a/pass.hcl
index 022edf7..601a47b 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-a/pass.hcl
+++ b/sentinel-policies/test/require-access-keys-use-pgp-a/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/fail-invalid-value.hcl b/sentinel-policies/test/require-access-keys-use-pgp-b/fail-invalid-value.hcl
index 8a9db02..7b27c16 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-b/fail-invalid-value.hcl
+++ b/sentinel-policies/test/require-access-keys-use-pgp-b/fail-invalid-value.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/fail-missing-value.hcl b/sentinel-policies/test/require-access-keys-use-pgp-b/fail-missing-value.hcl
index 4ed23fa..3a0661a 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-b/fail-missing-value.hcl
+++ b/sentinel-policies/test/require-access-keys-use-pgp-b/fail-missing-value.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/fail-with-null.hcl b/sentinel-policies/test/require-access-keys-use-pgp-b/fail-with-null.hcl
index d4c6349..4005ef0 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-b/fail-with-null.hcl
+++ b/sentinel-policies/test/require-access-keys-use-pgp-b/fail-with-null.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-invalid-value.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-invalid-value.sentinel
index aa59ce0..de50f5e 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-invalid-value.sentinel
+++ b/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-invalid-value.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 planned_values = {
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-missing-value.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-missing-value.sentinel
index 68c684f..8500146 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-missing-value.sentinel
+++ b/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-missing-value.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 planned_values = {
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-with-null.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-with-null.sentinel
index e26c59e..8804caa 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-with-null.sentinel
+++ b/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-fail-with-null.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 planned_values = {
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-pass.sentinel b/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-pass.sentinel
index 86f6fc9..2fdd807 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-pass.sentinel
+++ b/sentinel-policies/test/require-access-keys-use-pgp-b/mock-tfplan-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/require-access-keys-use-pgp-b/pass.hcl b/sentinel-policies/test/require-access-keys-use-pgp-b/pass.hcl
index 022edf7..601a47b 100644
--- a/sentinel-policies/test/require-access-keys-use-pgp-b/pass.hcl
+++ b/sentinel-policies/test/require-access-keys-use-pgp-b/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/require-even-number/fail.hcl b/sentinel-policies/test/require-even-number/fail.hcl
index 5a812ce..15def49 100644
--- a/sentinel-policies/test/require-even-number/fail.hcl
+++ b/sentinel-policies/test/require-even-number/fail.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 param "the_number" {
      value = 5
 }
diff --git a/sentinel-policies/test/require-even-number/pass.hcl b/sentinel-policies/test/require-even-number/pass.hcl
index c38233a..62c1bf8 100644
--- a/sentinel-policies/test/require-even-number/pass.hcl
+++ b/sentinel-policies/test/require-even-number/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 param "the_number" {
      value = 8
 }
diff --git a/sentinel-policies/test/require-modules-from-pmr-a/fail.hcl b/sentinel-policies/test/require-modules-from-pmr-a/fail.hcl
index c8bb213..45c3518 100644
--- a/sentinel-policies/test/require-modules-from-pmr-a/fail.hcl
+++ b/sentinel-policies/test/require-modules-from-pmr-a/fail.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 param "organization" {
   value = "Cloud-Operations"
 }
diff --git a/sentinel-policies/test/require-modules-from-pmr-a/mock-tfconfig-fail.sentinel b/sentinel-policies/test/require-modules-from-pmr-a/mock-tfconfig-fail.sentinel
index 0d2126b..bea7938 100644
--- a/sentinel-policies/test/require-modules-from-pmr-a/mock-tfconfig-fail.sentinel
+++ b/sentinel-policies/test/require-modules-from-pmr-a/mock-tfconfig-fail.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 
 providers = {
diff --git a/sentinel-policies/test/require-modules-from-pmr-a/mock-tfconfig-pass.sentinel b/sentinel-policies/test/require-modules-from-pmr-a/mock-tfconfig-pass.sentinel
index 07ef679..2aed39e 100644
--- a/sentinel-policies/test/require-modules-from-pmr-a/mock-tfconfig-pass.sentinel
+++ b/sentinel-policies/test/require-modules-from-pmr-a/mock-tfconfig-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 
 providers = {
diff --git a/sentinel-policies/test/require-modules-from-pmr-a/pass.hcl b/sentinel-policies/test/require-modules-from-pmr-a/pass.hcl
index 6ad58c1..690bb4f 100644
--- a/sentinel-policies/test/require-modules-from-pmr-a/pass.hcl
+++ b/sentinel-policies/test/require-modules-from-pmr-a/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 param "organization" {
   value = "Cloud-Operations"
 }
diff --git a/sentinel-policies/test/require-modules-from-pmr-b/fail.hcl b/sentinel-policies/test/require-modules-from-pmr-b/fail.hcl
index dee5311..1ee0b33 100644
--- a/sentinel-policies/test/require-modules-from-pmr-b/fail.hcl
+++ b/sentinel-policies/test/require-modules-from-pmr-b/fail.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 param "organization" {
   value = "Cloud-Operations"
 }
diff --git a/sentinel-policies/test/require-modules-from-pmr-b/mock-tfconfig-fail.sentinel b/sentinel-policies/test/require-modules-from-pmr-b/mock-tfconfig-fail.sentinel
index 0d2126b..bea7938 100644
--- a/sentinel-policies/test/require-modules-from-pmr-b/mock-tfconfig-fail.sentinel
+++ b/sentinel-policies/test/require-modules-from-pmr-b/mock-tfconfig-fail.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 
 providers = {
diff --git a/sentinel-policies/test/require-modules-from-pmr-b/mock-tfconfig-pass.sentinel b/sentinel-policies/test/require-modules-from-pmr-b/mock-tfconfig-pass.sentinel
index 07ef679..2aed39e 100644
--- a/sentinel-policies/test/require-modules-from-pmr-b/mock-tfconfig-pass.sentinel
+++ b/sentinel-policies/test/require-modules-from-pmr-b/mock-tfconfig-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 import "strings"
 
 providers = {
diff --git a/sentinel-policies/test/require-modules-from-pmr-b/pass.hcl b/sentinel-policies/test/require-modules-from-pmr-b/pass.hcl
index 2e58c84..0ff5df6 100644
--- a/sentinel-policies/test/require-modules-from-pmr-b/pass.hcl
+++ b/sentinel-policies/test/require-modules-from-pmr-b/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 param "organization" {
   value = "Cloud-Operations"
 }
diff --git a/sentinel-policies/test/restrict-acm-certificate-domains-a/fail.hcl b/sentinel-policies/test/restrict-acm-certificate-domains-a/fail.hcl
index 3127ac8..afc02c5 100644
--- a/sentinel-policies/test/restrict-acm-certificate-domains-a/fail.hcl
+++ b/sentinel-policies/test/restrict-acm-certificate-domains-a/fail.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfstate-functions" {
   source = "../../common-functions/tfstate-functions/tfstate-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-acm-certificate-domains-a/mock-tfstate-fail.sentinel b/sentinel-policies/test/restrict-acm-certificate-domains-a/mock-tfstate-fail.sentinel
index 895a1db..0b01cc7 100644
--- a/sentinel-policies/test/restrict-acm-certificate-domains-a/mock-tfstate-fail.sentinel
+++ b/sentinel-policies/test/restrict-acm-certificate-domains-a/mock-tfstate-fail.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 outputs = {}
diff --git a/sentinel-policies/test/restrict-acm-certificate-domains-a/mock-tfstate-pass.sentinel b/sentinel-policies/test/restrict-acm-certificate-domains-a/mock-tfstate-pass.sentinel
index 3396337..44a0e46 100644
--- a/sentinel-policies/test/restrict-acm-certificate-domains-a/mock-tfstate-pass.sentinel
+++ b/sentinel-policies/test/restrict-acm-certificate-domains-a/mock-tfstate-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 outputs = {}
diff --git a/sentinel-policies/test/restrict-acm-certificate-domains-a/pass.hcl b/sentinel-policies/test/restrict-acm-certificate-domains-a/pass.hcl
index ae3cfa2..39b6c83 100644
--- a/sentinel-policies/test/restrict-acm-certificate-domains-a/pass.hcl
+++ b/sentinel-policies/test/restrict-acm-certificate-domains-a/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfstate-functions" {
   source = "../../common-functions/tfstate-functions/tfstate-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-acm-certificate-domains-b/fail.hcl b/sentinel-policies/test/restrict-acm-certificate-domains-b/fail.hcl
index 3127ac8..afc02c5 100644
--- a/sentinel-policies/test/restrict-acm-certificate-domains-b/fail.hcl
+++ b/sentinel-policies/test/restrict-acm-certificate-domains-b/fail.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfstate-functions" {
   source = "../../common-functions/tfstate-functions/tfstate-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-acm-certificate-domains-b/mock-tfstate-fail.sentinel b/sentinel-policies/test/restrict-acm-certificate-domains-b/mock-tfstate-fail.sentinel
index 895a1db..0b01cc7 100644
--- a/sentinel-policies/test/restrict-acm-certificate-domains-b/mock-tfstate-fail.sentinel
+++ b/sentinel-policies/test/restrict-acm-certificate-domains-b/mock-tfstate-fail.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 outputs = {}
diff --git a/sentinel-policies/test/restrict-acm-certificate-domains-b/mock-tfstate-pass.sentinel b/sentinel-policies/test/restrict-acm-certificate-domains-b/mock-tfstate-pass.sentinel
index 3396337..44a0e46 100644
--- a/sentinel-policies/test/restrict-acm-certificate-domains-b/mock-tfstate-pass.sentinel
+++ b/sentinel-policies/test/restrict-acm-certificate-domains-b/mock-tfstate-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.3"
 
 outputs = {}
diff --git a/sentinel-policies/test/restrict-acm-certificate-domains-b/pass.hcl b/sentinel-policies/test/restrict-acm-certificate-domains-b/pass.hcl
index ae3cfa2..39b6c83 100644
--- a/sentinel-policies/test/restrict-acm-certificate-domains-b/pass.hcl
+++ b/sentinel-policies/test/restrict-acm-certificate-domains-b/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfstate-functions" {
   source = "../../common-functions/tfstate-functions/tfstate-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-a/fail-invalid-image.hcl b/sentinel-policies/test/restrict-gcp-instance-image-a/fail-invalid-image.hcl
index bd4eae8..c55b699 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-a/fail-invalid-image.hcl
+++ b/sentinel-policies/test/restrict-gcp-instance-image-a/fail-invalid-image.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-a/fail-no-initialize-params.hcl b/sentinel-policies/test/restrict-gcp-instance-image-a/fail-no-initialize-params.hcl
index 8f90cf7..7e1f64e 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-a/fail-no-initialize-params.hcl
+++ b/sentinel-policies/test/restrict-gcp-instance-image-a/fail-no-initialize-params.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-fail-invalid-image.sentinel b/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-fail-invalid-image.sentinel
index 96ec4cb..29e050f 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-fail-invalid-image.sentinel
+++ b/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-fail-invalid-image.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-fail-no-initialize-params.sentinel b/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-fail-no-initialize-params.sentinel
index da4969b..309ee2d 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-fail-no-initialize-params.sentinel
+++ b/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-fail-no-initialize-params.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-pass.sentinel b/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-pass.sentinel
index 5f26ad3..b7a41b9 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-pass.sentinel
+++ b/sentinel-policies/test/restrict-gcp-instance-image-a/mock-tfplan-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-a/pass.hcl b/sentinel-policies/test/restrict-gcp-instance-image-a/pass.hcl
index 022edf7..601a47b 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-a/pass.hcl
+++ b/sentinel-policies/test/restrict-gcp-instance-image-a/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-b/fail-invalid-image.hcl b/sentinel-policies/test/restrict-gcp-instance-image-b/fail-invalid-image.hcl
index bd4eae8..c55b699 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-b/fail-invalid-image.hcl
+++ b/sentinel-policies/test/restrict-gcp-instance-image-b/fail-invalid-image.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-b/fail-no-initialize-params.hcl b/sentinel-policies/test/restrict-gcp-instance-image-b/fail-no-initialize-params.hcl
index 8f90cf7..7e1f64e 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-b/fail-no-initialize-params.hcl
+++ b/sentinel-policies/test/restrict-gcp-instance-image-b/fail-no-initialize-params.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-fail-invalid-image.sentinel b/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-fail-invalid-image.sentinel
index 96ec4cb..29e050f 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-fail-invalid-image.sentinel
+++ b/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-fail-invalid-image.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-fail-no-initialize-params.sentinel b/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-fail-no-initialize-params.sentinel
index da4969b..309ee2d 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-fail-no-initialize-params.sentinel
+++ b/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-fail-no-initialize-params.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-pass.sentinel b/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-pass.sentinel
index 5f26ad3..b7a41b9 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-pass.sentinel
+++ b/sentinel-policies/test/restrict-gcp-instance-image-b/mock-tfplan-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/restrict-gcp-instance-image-b/pass.hcl b/sentinel-policies/test/restrict-gcp-instance-image-b/pass.hcl
index 022edf7..601a47b 100644
--- a/sentinel-policies/test/restrict-gcp-instance-image-b/pass.hcl
+++ b/sentinel-policies/test/restrict-gcp-instance-image-b/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-vault-auth-methods/fail.hcl b/sentinel-policies/test/restrict-vault-auth-methods/fail.hcl
index 8bb94c2..321c3b7 100644
--- a/sentinel-policies/test/restrict-vault-auth-methods/fail.hcl
+++ b/sentinel-policies/test/restrict-vault-auth-methods/fail.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/sentinel-policies/test/restrict-vault-auth-methods/mock-tfplan-fail.sentinel b/sentinel-policies/test/restrict-vault-auth-methods/mock-tfplan-fail.sentinel
index f81d6da..63e62d6 100644
--- a/sentinel-policies/test/restrict-vault-auth-methods/mock-tfplan-fail.sentinel
+++ b/sentinel-policies/test/restrict-vault-auth-methods/mock-tfplan-fail.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/restrict-vault-auth-methods/mock-tfplan-pass.sentinel b/sentinel-policies/test/restrict-vault-auth-methods/mock-tfplan-pass.sentinel
index 88eb139..e7a92bc 100644
--- a/sentinel-policies/test/restrict-vault-auth-methods/mock-tfplan-pass.sentinel
+++ b/sentinel-policies/test/restrict-vault-auth-methods/mock-tfplan-pass.sentinel
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 terraform_version = "0.12.24"
 
 planned_values = {
diff --git a/sentinel-policies/test/restrict-vault-auth-methods/pass.hcl b/sentinel-policies/test/restrict-vault-auth-methods/pass.hcl
index 022edf7..601a47b 100644
--- a/sentinel-policies/test/restrict-vault-auth-methods/pass.hcl
+++ b/sentinel-policies/test/restrict-vault-auth-methods/pass.hcl
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 module "tfplan-functions" {
   source = "../../common-functions/tfplan-functions/tfplan-functions.sentinel"
 }
diff --git a/vault-auth-methods/main.tf b/vault-auth-methods/main.tf
index b285859..a8407fa 100644
--- a/vault-auth-methods/main.tf
+++ b/vault-auth-methods/main.tf
@@ -1,3 +1,5 @@
+# Copyright IBM Corp. 2022, 2026
+
 variable "types" {
   description = "types of Vault auth methods"
   type = "list"
diff --git a/vault-auth-methods/vault.auto.tfvars b/vault-auth-methods/vault.auto.tfvars
index 9bb30aa..61ca27a 100644
--- a/vault-auth-methods/vault.auto.tfvars
+++ b/vault-auth-methods/vault.auto.tfvars
@@ -1,2 +1,4 @@
+# Copyright IBM Corp. 2022, 2026
+
 types = ["aws", "azure", "gcp"]
 paths = ["roger-aws", "roger-azure", "roger-gcp"]