<!-- llms-index: https://docs.gradle.com/develocity/llms.txt -->

<a id="component-eol-banner"></a>

You are viewing **Develocity Provenance Governor 1.5**. To view the latest available version of the docs, see [1.7](https://docs.gradle.com/develocity/provenance-governor/1.7/policy-types/).

# Policy Types

Develocity Provenance Governor supports the following policy types:

 
| Policy Kind | Description |
| --- | --- |
| BuildTool | Enforce specific build tool and version usage |
| JavaToolchains | Control Java toolchain (JDK version/vendor) requirements |
| ResolvedDependenciesRepositories | Restrict dependency resolution sources |
| PackageUrl | Allow or block specific dependencies |
| PublishRepositories | Enforce artifact promotion workflows |
| AttestationsExist | Verify required attestation types exist |
| TrustedPublicKeys | Validate attestation signatures |
| VerificationSummary | Evaluate VSA verification results |

*   [BuildTool](https://docs.gradle.com/develocity/provenance-governor/1.5/policy-type-build-tool/) — Enforce constraints on the build tool used.
    
*   [JavaToolchains](https://docs.gradle.com/develocity/provenance-governor/1.5/policy-type-java-toolchains/) — Enforce constraints on Java toolchains.
    
*   [ResolvedDependenciesRepositories](https://docs.gradle.com/develocity/provenance-governor/1.5/policy-type-resolved-dependencies-repositories/) — Enforce constraints on dependency resolution repositories.
    
*   [PackageUrl](https://docs.gradle.com/develocity/provenance-governor/1.5/policy-type-package-url/) — Enforce constraints on resolved package URLs.
    
*   [PublishRepositories](https://docs.gradle.com/develocity/provenance-governor/1.5/policy-type-publish-repositories/) — Enforce constraints on publish repositories.
    
*   [AttestationsExist](https://docs.gradle.com/develocity/provenance-governor/1.5/policy-type-attestations-exist/) — Require specific attestations to be present.
    
*   [TrustedPublicKeys](https://docs.gradle.com/develocity/provenance-governor/1.5/policy-type-trusted-public-keys/) — Enforce attestation signature verification.
    
*   [VerificationSummary](https://docs.gradle.com/develocity/provenance-governor/1.5/policy-type-verification-summary/) — Enforce constraints on verification summary results.