diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 26da661..6d78cd4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,3 +1,7 @@
+# SPDX-FileCopyrightText: 2024 Winni Neessen <wn@neessen.dev>
+#
+# SPDX-License-Identifier: CC0-1.0
+
 version: 2
 updates:
   - package-ecosystem: github-actions
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f23429b..e61cd8e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,14 +1,7 @@
-# For most projects, this workflow file will not need changing; you simply need
-# to commit it to your repository.
-#
-# You may wish to alter this file to override the set of languages analyzed,
-# or to provide custom queries or build logic.
-#
-# ******** NOTE ********
-# We have attempted to detect the languages in your repository. Please check
-# the `language` matrix defined below to confirm you have the correct set of
-# supported CodeQL languages.
+# SPDX-FileCopyrightText: 2024 Winni Neessen <wn@neessen.dev>
 #
+# SPDX-License-Identifier: CC0-1.0
+
 name: "CodeQL"
 
 on: