trigger_actions: ["install", "upgrade", "remove"] targets: ["usr/share/ca-certificates/trust-source/*"] run: "/usr/sbin/update-ca-trust"