diff --git a/components/TARGET_PSA/services/attestation/qcbor/src/qcbor_decode.c b/components/TARGET_PSA/services/attestation/qcbor/src/qcbor_decode.c
index 22860382de..2cfb130141 100644
--- a/components/TARGET_PSA/services/attestation/qcbor/src/qcbor_decode.c
+++ b/components/TARGET_PSA/services/attestation/qcbor/src/qcbor_decode.c
@@ -2,6 +2,7 @@
  Copyright (c) 2016-2018, The Linux Foundation.
  Copyright (c) 2018-2019, Laurence Lundblade.
  All rights reserved.
+ SPDX-License-Identifier: BSD-3-Clause
 
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are
diff --git a/components/TARGET_PSA/services/attestation/qcbor/src/qcbor_encode.c b/components/TARGET_PSA/services/attestation/qcbor/src/qcbor_encode.c
index 460dd8520d..d18d811c8c 100644
--- a/components/TARGET_PSA/services/attestation/qcbor/src/qcbor_encode.c
+++ b/components/TARGET_PSA/services/attestation/qcbor/src/qcbor_encode.c
@@ -2,6 +2,7 @@
  Copyright (c) 2016-2018, The Linux Foundation.
  Copyright (c) 2018-2019, Laurence Lundblade.
  All rights reserved.
+ SPDX-License-Identifier: BSD-3-Clause
 
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are