Function initTrustConfig

Returns {
    config: {
        trust: {
            enforcement: {
                denyLocalVaultSigningIfNotaryEnabled: boolean;
                notaryMaxClockSkewSeconds: number;
                requireNotaryFor: (
                    | "TRANSPARENCY_ROOT"
                    | "MERKLE_ROOT"
                    | "CERT"
                    | "BUNDLE"
                    | "BOM"
                    | "INSTALLED_LOCK"
                    | "RELEASE_MANIFEST"
                    | "BACKUP_MANIFEST"
                    | "ORG_SCORECARD"
                    | "TRANSFORM_PLAN"
                    | "COMPLIANCE_MAPS"
                    | "OPS_POLICY"
                )[];
            };
            mode: "NOTARY"
            | "LOCAL_VAULT";
            notary: {
                allowedSignKinds: (
                    | "TRANSPARENCY_ROOT"
                    | "MERKLE_ROOT"
                    | "CERT"
                    | "BUNDLE"
                    | "BOM"
                    | "INSTALLED_LOCK"
                    | "RELEASE_MANIFEST"
                    | "BACKUP_MANIFEST"
                    | "ORG_SCORECARD"
                    | "TRANSFORM_PLAN"
                    | "COMPLIANCE_MAPS"
                    | "OPS_POLICY"
                )[];
                auth: { headerName: string; hmacAlg: "sha256"; secretRef: string };
                baseUrl: string;
                pinnedPubkeyFingerprint: string;
                requiredAttestationLevel: "SOFTWARE" | "HARDWARE";
                unixSocketPath: string | null;
            };
            version: 1;
        };
    };
    path: string;
    sigPath: string;
}