Github Trust Root Updates

[Adityashar]

Hello Team,

We are planning to use Kyverno's Image Verification with Github's Sigstore Instance and will need Github's Root cert for the former's implementation - https://github.com/github/artifact-attestations-helm-charts/blob/main/charts/trust-policies/templates/trustroot-github.yaml#L9

My question is how often does this root cert gets updated. Is it something that can always be used without us worrying about the changes? If not, then is there a better way on how we could maintain this cert without needing to manually check for changes in this repo?