bug(k8s): versions are missing in KBOM #8358
Labels
kind/bug
Categorizes issue or PR as related to a bug.
target/kubernetes
Issues relating to kubernetes cluster scanning
Description
Trivy is not accurately identifying the image versions of certain control plane pods in Kubernetes.
For instance, in a Minikube environment,
k8s.gcr.io/etcd:3.5.3-0
image contains the following imageID:such
imageID
is detected assha256:13f53ed1d91e2e11aac476ee9a0269fdda6cc4874eba903efd40daf50c55eee5
, and will be skipped as non sha256 digests:https://github.com/aquasecurity/trivy-kubernetes/blob/812ea842831c9f92184993d3810c9d28695e4de1/pkg/k8s/k8s.go#L581-L585
Reproduction steps
There is no version for
but it works for
kind
:Discussed in #8348
The text was updated successfully, but these errors were encountered: