@vigilbase/cli/dist/lib/system-trust.js

Vigilbase CLI — security scanners, agent tools, and Vigilbase One from the terminal.

import * as tls from 'node:tls';
/** CLI startup only: preserve bundled/extra CAs and add OS-managed trust. */
export function configureSystemTrust(api = tls) {
    if (!api.getCACertificates || !api.setDefaultCACertificates)
        return false;
    api.setDefaultCACertificates([
        ...new Set([...api.getCACertificates('default'), ...api.getCACertificates('system')]),
    ]);
    return true;
}