Function loadTrustConfig

Returns {
    trust: {
        enforcement: {
            denyLocalVaultSigningIfNotaryEnabled: boolean;
            notaryMaxClockSkewSeconds: number;
            requireNotaryFor: (
                | "TRANSPARENCY_ROOT"
                | "MERKLE_ROOT"
                | "CERT"
                | "BUNDLE"
                | "BOM"
                | "INSTALLED_LOCK"
                | "RELEASE_MANIFEST"
                | "BACKUP_MANIFEST"
                | "ORG_SCORECARD"
                | "TRANSFORM_PLAN"
                | "COMPLIANCE_MAPS"
                | "OPS_POLICY"
            )[];
        };
        mode: "NOTARY"
        | "LOCAL_VAULT";
        notary: {
            allowedSignKinds: (
                | "TRANSPARENCY_ROOT"
                | "MERKLE_ROOT"
                | "CERT"
                | "BUNDLE"
                | "BOM"
                | "INSTALLED_LOCK"
                | "RELEASE_MANIFEST"
                | "BACKUP_MANIFEST"
                | "ORG_SCORECARD"
                | "TRANSFORM_PLAN"
                | "COMPLIANCE_MAPS"
                | "OPS_POLICY"
            )[];
            auth: { headerName: string; hmacAlg: "sha256"; secretRef: string };
            baseUrl: string;
            pinnedPubkeyFingerprint: string;
            requiredAttestationLevel: "SOFTWARE" | "HARDWARE";
            unixSocketPath: string | null;
        };
        version: 1;
    };
}