diff --git a/.reuse/dep5 b/.reuse/dep5
deleted file mode 100644
index d166b88..0000000
--- a/.reuse/dep5
+++ /dev/null
@@ -1,34 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: Gardener gardenlogin
-Upstream-Contact: The Gardener project <gardener@googlegroups.com>
-Source: https://github.com/gardener/gardenlogin
-
-# --------------------------------------------------
-# source code
-
-Files:
-  .ci/**
-  .dockerignore
-  .github/*
-  .gitignore
-  .gimps.yaml
-  .golangci.yaml
-  CODEOWNERS
-  go.mod
-  go.sum
-  LATEST
-  VERSION
-Copyright: 2021 SAP SE or an SAP affiliate company and Gardener contributors
-License: Apache-2.0
-
-# --------------------------------------------------
-# documentation
-
-Files:
-  *.md
-Copyright: 2021 SAP SE or an SAP affiliate company and Gardener contributors
-License: CC-BY-4.0
-
-# --------------------------------------------------
-# source dependencies
-
diff --git a/REUSE.toml b/REUSE.toml
new file mode 100644
index 0000000..98d7aa4
--- /dev/null
+++ b/REUSE.toml
@@ -0,0 +1,28 @@
+version = 1
+SPDX-PackageName = "Gardener gardenlogin"
+SPDX-PackageSupplier = "The Gardener project <gardener@googlegroups.com>"
+SPDX-PackageDownloadLocation = "https://github.com/gardener/gardenlogin"
+
+[[annotations]]
+path = [
+  ".ci/**",
+  ".dockerignore",
+  ".github/**",
+  ".gitignore",
+  ".gimps.yaml",
+  ".golangci.yaml",
+  "CODEOWNERS",
+  "go.mod",
+  "go.sum",
+  "LATEST",
+  "VERSION"
+]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2021-2024 SAP SE or an SAP affiliate company and Gardener contributors"
+SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = ["**.md"]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "2021-2024 SAP SE or an SAP affiliate company and Gardener contributors"
+SPDX-License-Identifier = "CC-BY-4.0"