---
component: provenance-governor
version: "1.7"
slug: provenance-governor/attestation-resolved-dependencies
canonical_url: "https://docs.gradle.com/develocity/provenance-governor/1.7/attestation-resolved-dependencies/"
title: "Resolved Dependencies Predicate"
description: "Reference for the Resolved Dependencies attestation predicate."
keywords:
  - "attestation"
  - "supply chain"
  - "API"
status: current
---

<!-- llms-index: https://docs.gradle.com/develocity/llms.txt -->

# Resolved Dependencies Predicate

<a id="resolved-dependencies-predicate"></a>

Predicate Type URI: `[https://gradle.com/attestation/resolved-dependencies/v1](https://gradle.com/attestation/resolved-dependencies/v1)`

Contains the set of resolved third-party dependencies as [pURLs](https://github.com/package-url/purl-spec).

Fields:

*   `buildScanUri` (URI string) - Link to the Build Scan for correlation.
    
*   `purls` (array of strings) - Distinct, sorted list of pURLs. May be empty.
    

Example (truncated list):

```json
{
  "buildScanUri": "https://develocity.example.com/s/g4b7d8c1m2",
  "purls": [
    "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.1",
    "pkg:maven/org.apache.commons/commons-lang3@3.14.0",
    "pkg:npm/react@18.3.1"
  ]
}
```