Software Supply Chain
Trust Store
Also: root store, CA bundle, certificate bundle
The list of root certificates a device, browser or program accepts as starting points for trusting a certificate.
In more detail
Browsers, operating systems, language runtimes and container images each keep their own trust store, and they are updated on different schedules. A container image carries the store from the day it was built, so it can keep trusting a bad certificate authority long after your browser stopped.