Struct TrustConfig 

pub struct TrustConfig {
    pub default_log: Option<String>,
    pub logs: HashMap<String, TrustRoot>,
}

Multi-log trust configuration.

Indexes trust material by log ID. Each log entry is a TrustRoot. The default_log selects which log is used when none is specified.

Usage:

let config = TrustConfig::default_config();
let root = config.get_log("sigstore-rekor").unwrap();

Fields

default_log: Option<String>

ID of the default log. Must reference a key in logs.

logs: HashMap<String, TrustRoot>

Map of log ID to trust material.

Implementations

impl TrustConfig

pub fn get_log(&self, log_id: &str) -> Option<&TrustRoot>

Look up trust material for a specific log by ID.

pub fn default_log(&self) -> Option<(&str, &TrustRoot)>

Get the default log’s trust material.

pub fn validate(&self) -> Result<(), TransparencyError>

Validate the config at load time.

Checks:

• If default_log is set, it must reference a key in logs.
• Every TrustRoot whose signature_algorithm is EcdsaP256 MUST carry a non-empty TrustRoot::ecdsa_log_public_key_der. Without it the verifier would trust whatever ECDSA key the bundle carried (→ trivially forgeable checkpoint). Without this check operators can ship configs that look healthy and silently accept any ECDSA signature.

pub fn default_config() -> Self

Compiled-in default: Rekor production shard.

Origin pinned from GET https://rekor.sigstore.dev/api/v1/log on 2026-04-09. Public key from sigstore trusted_root.json.

Trait Implementations

impl Clone for TrustConfig

fn clone(&self) -> TrustConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TrustConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TrustConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.