Multiple exposedsecretreports results for pod, but not for all.

[xzizka]

Hello,

We see "weird" behaviour in our deployment and cannot identify the root cause.
We use Kubernetes 1.25.5 and Trivy Operator 0.18.1.
We deployed it to our cluster and it looks like it works fine, but when we checked the results of exposedsecretreports CRD we saw the following results:

NAMESPACE           NAME                                                              REPOSITORY                                                TAG             SCANNER   AGE
argocd-system       replicaset-5c57d4df7d                                             iao-sq013-pub/argoproj/argocd                             v2.6.6          Trivy     22m
argocd-system       replicaset-argocd-redis-ha-haproxy-59477dd6d-config-init          iao-sq013-pub/haproxy                                     2.6.9-alpine    Trivy     10m
argocd-system       replicaset-argocd-redis-ha-haproxy-59477dd6d-haproxy              iao-sq013-pub/haproxy                                     2.6.9-alpine    Trivy     10m
argocd-system       statefulset-68bbf5999d                                            iao-sq013-pub/argoproj/argocd                             v2.6.6          Trivy     22m
argocd-system       statefulset-argocd-redis-ha-server-config-init                    iao-sq013-pub/redis                                       7.0.8-alpine    Trivy     22m
argocd-system       statefulset-argocd-redis-ha-server-redis                          iao-sq013-pub/redis                                       7.0.8-alpine    Trivy     22m
argocd-system       statefulset-argocd-redis-ha-server-sentinel                       iao-sq013-pub/redis                                       7.0.8-alpine    Trivy     22m
argocd-system       statefulset-argocd-redis-ha-server-split-brain-fix                iao-sq013-pub/redis                                       7.0.8-alpine    Trivy     22m
conjur-system       replicaset-597674c466                                             ps-sq002-pub/kb-secrets-provider-for-k8s                  1.5.2-KB.3      Trivy     10m
dashboard-system    replicaset-74c94958fc                                             iao-sq013-pub/kubernetesui/metrics-scraper                v1.0.8          Trivy     12m
krv-system          replicaset-krv-krv-579bffbfc9-krv                                 iao-sq013-pub/k8s-krv                                     0.2.0           Trivy     20m
kube-system         daemonset-calico-node-calico-node                                 iao-sq013-pub/calico/node                                 v3.24.5         Trivy     22m
kube-system         daemonset-calico-node-flexvol-driver                              iao-sq013-pub/calico/pod2daemon-flexvol                   v3.24.5         Trivy     22m
kube-system         daemonset-calico-node-install-cni                                 iao-sq013-pub/calico/cni                                  v3.24.5         Trivy     22m
kube-system         daemonset-calico-node-upgrade-ipam                                iao-sq013-pub/calico/cni                                  v3.24.5         Trivy     22m
kube-system         daemonset-csi-cinder-nodeplugin-cinder-csi-plugin                 iao-sq013-pub/k8scloudprovider/cinder-csi-plugin          v1.25.0         Trivy     22m
kube-system         daemonset-csi-cinder-nodeplugin-liveness-probe                    iao-sq013-pub/sig-storage/livenessprobe                   v2.5.0          Trivy     22m
kube-system         daemonset-csi-cinder-nodeplugin-node-driver-registrar             iao-sq013-pub/sig-storage/csi-node-driver-registrar       v2.4.0          Trivy     22m
kube-system         daemonset-kube-proxy-kube-proxy                                   iao-sq013-pub/kube-proxy                                  v1.25.5         Trivy     20m
kube-system         daemonset-restic-restic                                           iao-sq013-pub/velero/velero                               v1.8.1          Trivy     22m
kube-system         pod-nginx-proxy-vncub8666-nginx-proxy                             iao-sq013-pub/nginx                                       1.23.2-alpine   Trivy     22m
kube-system         pod-nginx-proxy-vncub8667-nginx-proxy                             iao-sq013-pub/nginx                                       1.23.2-alpine   Trivy     22m
kube-system         replicaset-6cbb9cb84d                                             iao-sq013-pub/calico/kube-controllers                     v3.24.5         Trivy     17m
kube-system         replicaset-7d44d446b                                              ps-sq002-pub/speed/k8s-admission-webhook                  1.12.0          Trivy     21m
kube-system         replicaset-kube-metrics-adapter-5984dc449d-kube-metrics-adapter   iao-sq013-pub/kube-metrics-adapter/kube-metrics-adapter   v0.2.1          Trivy     10m
kube-system         replicaset-metrics-server-7f5676cd47-metrics-server               iao-sq013-pub/metrics-server/metrics-server               v0.6.4          Trivy     21m
kube-system         replicaset-snapshot-controller-7549c6fdd8-snapshot-controller     iao-sq013-pub/sig-storage/snapshot-controller             v4.2.1          Trivy     10m
monitoring-system   replicaset-5f6c44c577                                             iao-sq002-pub/library/telegraf                            1.24.4          Trivy     22m
monitoring-system   replicaset-5fd8889ff7                                             iao-sq002-pub/filewatcher/filewatcher                     v1.0.1          Trivy     10m
monitoring-system   replicaset-6f555b4cc                                              iao-sq002-pub/prometheus/prometheus-config-reloader       v0.67.0         Trivy     10m
monitoring-system   replicaset-7cd4f7799                                              iao-sq002-pub/kube-state-metrics/kube-state-metrics       2.10.0          Trivy     21m
monitoring-system   replicaset-8454f89f97                                             iao-sq002-pub/busybox/busybox                             1.29            Trivy     10m
monitoring-system   replicaset-858fccdcd                                              iao-sq002-pub/prometheus/prometheus                       v2.47.0         Trivy     10m
monitoring-system   replicaset-8675d5b859                                             iao-sq002-pub/prometheus/prometheus-config-reloader       v0.67.0         Trivy     10m
monitoring-system   replicaset-86d66c4b7d                                             iao-sq002-pub/busybox/busybox                             1.29            Trivy     10m
monitoring-system   replicaset-9b9cf967b                                              iao-sq002-pub/prometheus/prometheus                       v2.47.0         Trivy     10m
polaris-system      replicaset-polaris-polaris-dashboard-77c775567f-dashboard         iao-sq013-pub/fairwinds/polaris                           7.0.2           Trivy     13m
trivy-system        replicaset-trivy-operator-6b54b8c98b-trivy-operator               iao-sq013-pub/aquasecurity/trivy-operator                 0.18.1          Trivy     11m

The interesting thing is that there are just 2 records for nginx-proxy workload,

e57toc@vncub17999:~ $ kubectl get exposedsecretreports.aquasecurity.github.io -A | grep nginx
kube-system         pod-nginx-proxy-vncub8666-nginx-proxy                             iao-sq013-pub/nginx                                       1.23.2-alpine   Trivy     12m
kube-system         pod-nginx-proxy-vncub8667-nginx-proxy                             iao-sq013-pub/nginx                                       1.23.2-alpine   Trivy     12m
e57toc@vncub17999:~ $

but we have 3 pods in the cluster.

e57toc@vncub17999:~ $
e57toc@vncub17999:~ $ kubectl get pod -n kube-system | grep nginx
nginx-proxy-vncub13205                                    1/1     Running             0             10h
nginx-proxy-vncub8666                                     1/1     Running             0             10h
nginx-proxy-vncub8667                                     1/1     Running             0             10h
e57toc@vncub17999:~ $

Can someone please explain why we see reports just for 2 pods of 3 and not all 3 or just one pod? All the pods have the same definition. The only difference is that they are running on different nodes.
The interesting thing is that it happens randomly. I have been testing that on clusters that are destroyed and recreated once a day using the same deployment pipeline with the same parameters in Jenkins. Today, after the cluster was up again I checked the situation and there was only one record for nginx (see the list bellow), so it is hard to reproduce.

NAMESPACE           NAME                                                              REPOSITORY                                                TAG             SCANNER   AGE
argocd-system       replicaset-argocd-redis-ha-haproxy-59477dd6d-config-init          iao-sq013-pub/haproxy                                     2.6.9-alpine    Trivy     4h39m
argocd-system       replicaset-argocd-redis-ha-haproxy-59477dd6d-haproxy              iao-sq013-pub/haproxy                                     2.6.9-alpine    Trivy     4h39m
argocd-system       replicaset-argocd-server-89d745-argocd-server                     iao-sq013-pub/argoproj/argocd                             v2.6.6          Trivy     4h49m
argocd-system       statefulset-68bbf5999d                                            iao-sq013-pub/argoproj/argocd                             v2.6.6          Trivy     4h49m
argocd-system       statefulset-argocd-redis-ha-server-config-init                    iao-sq013-pub/redis                                       7.0.8-alpine    Trivy     4h49m
argocd-system       statefulset-argocd-redis-ha-server-redis                          iao-sq013-pub/redis                                       7.0.8-alpine    Trivy     4h49m
argocd-system       statefulset-argocd-redis-ha-server-sentinel                       iao-sq013-pub/redis                                       7.0.8-alpine    Trivy     4h49m
argocd-system       statefulset-argocd-redis-ha-server-split-brain-fix                iao-sq013-pub/redis                                       7.0.8-alpine    Trivy     4h49m
conjur-system       replicaset-597674c466                                             ps-sq002-pub/kb-secrets-provider-for-k8s                  1.5.2-KB.3      Trivy     4h40m
dashboard-system    replicaset-74c94958fc                                             iao-sq013-pub/kubernetesui/metrics-scraper                v1.0.8          Trivy     4h43m
krv-system          replicaset-krv-krv-579bffbfc9-krv                                 iao-sq013-pub/k8s-krv                                     0.2.0           Trivy     4h41m
kube-system         daemonset-calico-node-calico-node                                 iao-sq013-pub/calico/node                                 v3.24.5         Trivy     4h48m
kube-system         daemonset-calico-node-flexvol-driver                              iao-sq013-pub/calico/pod2daemon-flexvol                   v3.24.5         Trivy     4h48m
kube-system         daemonset-calico-node-install-cni                                 iao-sq013-pub/calico/cni                                  v3.24.5         Trivy     4h48m
kube-system         daemonset-calico-node-upgrade-ipam                                iao-sq013-pub/calico/cni                                  v3.24.5         Trivy     4h48m
kube-system         daemonset-csi-cinder-nodeplugin-cinder-csi-plugin                 iao-sq013-pub/k8scloudprovider/cinder-csi-plugin          v1.25.0         Trivy     4h49m
kube-system         daemonset-csi-cinder-nodeplugin-liveness-probe                    iao-sq013-pub/sig-storage/livenessprobe                   v2.5.0          Trivy     4h49m
kube-system         daemonset-csi-cinder-nodeplugin-node-driver-registrar             iao-sq013-pub/sig-storage/csi-node-driver-registrar       v2.4.0          Trivy     4h49m
kube-system         daemonset-nodelocaldns-node-cache                                 iao-sq013-pub/dns/k8s-dns-node-cache                      1.21.1          Trivy     4h49m
kube-system         daemonset-restic-restic                                           iao-sq013-pub/velero/velero                               v1.8.1          Trivy     4h44m
kube-system         pod-nginx-proxy-vncub8666-nginx-proxy                             iao-sq013-pub/nginx                                       1.23.2-alpine   Trivy     4h48m
kube-system         replicaset-6cbb9cb84d                                             iao-sq013-pub/calico/kube-controllers                     v3.24.5         Trivy     4h41m
kube-system         replicaset-7d44d446b                                              ps-sq002-pub/speed/k8s-admission-webhook                  1.12.0          Trivy     4h50m
kube-system         replicaset-kube-metrics-adapter-5984dc449d-kube-metrics-adapter   iao-sq013-pub/kube-metrics-adapter/kube-metrics-adapter   v0.2.1          Trivy     4h42m
kube-system         replicaset-metrics-server-7f5676cd47-metrics-server               iao-sq013-pub/metrics-server/metrics-server               v0.6.4          Trivy     4h40m
kube-system         replicaset-snapshot-controller-7549c6fdd8-snapshot-controller     iao-sq013-pub/sig-storage/snapshot-controller             v4.2.1          Trivy     4h41m
monitoring-system   daemonset-monitoring-prometheus-node-exporter-node-exporter       iao-sq002-pub/prometheus/node-exporter                    v1.6.1          Trivy     4h48m
monitoring-system   replicaset-5f6c44c577                                             iao-sq002-pub/library/telegraf                            1.24.4          Trivy     4h42m
monitoring-system   replicaset-7cd4f7799                                              iao-sq002-pub/kube-state-metrics/kube-state-metrics       2.10.0          Trivy     4h39m
monitoring-system   replicaset-8454f89f97                                             iao-sq002-pub/busybox/busybox                             1.29            Trivy     4h43m
monitoring-system   replicaset-858fccdcd                                              iao-sq002-pub/prometheus/prometheus                       v2.47.0         Trivy     4h43m
monitoring-system   replicaset-8675d5b859                                             iao-sq002-pub/prometheus/prometheus-config-reloader       v0.67.0         Trivy     4h43m
polaris-system      replicaset-polaris-polaris-dashboard-77c775567f-dashboard         iao-sq013-pub/fairwinds/polaris                           7.0.2           Trivy     4h41m
trivy-system        replicaset-trivy-operator-6b54b8c98b-trivy-operator               iao-sq013-pub/aquasecurity/trivy-operator                 0.18.1          Trivy     4h42m
e57toc@vncub17999:~ $

Is there any race condition or something like that?
Thank you for your help.

[chen-keinan]

@xzizka could you try to disable the following two flags and restart operator:

• https://github.com/aquasecurity/trivy-operator/blob/main/deploy/helm/values.yaml#L71
• https://github.com/aquasecurity/trivy-operator/blob/main/deploy/helm/values.yaml#L73

[xzizka]

Hello @chen-keinan,
Thank you for your answer. I changed values in the deployment of trivy-operator pod and now I see all 3 pods now.

e57toc@vncub17999:~/trivy $ k get  [exposedsecretreports.aquasecurity.github.io](http://exposedsecretreports.aquasecurity.github.io/)  -A | grep nginx
kube-system         pod-nginx-proxy-vncub13205-nginx-proxy                            iao-sq013-pub/nginx                                                 1.23.2-alpine     Trivy     14m
kube-system         pod-nginx-proxy-vncub8666-nginx-proxy                             iao-sq013-pub/nginx                                                 1.23.2-alpine     Trivy     14m
kube-system         pod-nginx-proxy-vncub8667-nginx-proxy                             iao-sq013-pub/nginx                                                 1.23.2-alpine     Trivy     14m
e57toc@vncub17999:~/trivy $

I now see more records.

e57toc@vncub17999:~ $ k get  [exposedsecretreports.aquasecurity.github.io](http://exposedsecretreports.aquasecurity.github.io/)  -A
NAMESPACE           NAME                                                              REPOSITORY                                                          TAG               SCANNER   AGE
argocd-system       replicaset-5c57d4df7d                                             iao-sq013-pub/argoproj/argocd                                       v2.6.6            Trivy     32m
argocd-system       replicaset-779bb55997                                             iao-sq013-pub/argoproj/argocd                                       v2.6.6            Trivy     32m
argocd-system       replicaset-argocd-dex-server-5f78d7d4dc-copyutil                  iao-sq013-pub/argoproj/argocd                                       v2.6.6            Trivy     32m
argocd-system       replicaset-argocd-dex-server-5f78d7d4dc-dex                       iao-sq013-pub/dexidp/dex                                            v2.35.3           Trivy     32m
argocd-system       replicaset-argocd-redis-ha-haproxy-59477dd6d-config-init          iao-sq013-pub/haproxy                                               2.6.9-alpine      Trivy     33m
argocd-system       replicaset-argocd-redis-ha-haproxy-59477dd6d-haproxy              iao-sq013-pub/haproxy                                               2.6.9-alpine      Trivy     33m
argocd-system       replicaset-argocd-repo-server-55b4bf59f4-argocd-repo-server       iao-sq013-pub/argoproj/argocd                                       v2.6.6            Trivy     32m
argocd-system       replicaset-argocd-repo-server-55b4bf59f4-copyutil                 iao-sq013-pub/argoproj/argocd                                       v2.6.6            Trivy     32m
argocd-system       replicaset-argocd-server-89d745-argocd-server                     iao-sq013-pub/argoproj/argocd                                       v2.6.6            Trivy     32m
argocd-system       statefulset-68bbf5999d                                            iao-sq013-pub/argoproj/argocd                                       v2.6.6            Trivy     32m
argocd-system       statefulset-argocd-redis-ha-server-config-init                    iao-sq013-pub/redis                                                 7.0.8-alpine      Trivy     33m
argocd-system       statefulset-argocd-redis-ha-server-redis                          iao-sq013-pub/redis                                                 7.0.8-alpine      Trivy     33m
argocd-system       statefulset-argocd-redis-ha-server-sentinel                       iao-sq013-pub/redis                                                 7.0.8-alpine      Trivy     33m
argocd-system       statefulset-argocd-redis-ha-server-split-brain-fix                iao-sq013-pub/redis                                                 7.0.8-alpine      Trivy     33m
conjur-system       replicaset-597674c466                                             ps-sq002-pub/kb-secrets-provider-for-k8s                            1.5.2-KB.3        Trivy     32m
dashboard-system    replicaset-74c94958fc                                             iao-sq013-pub/kubernetesui/metrics-scraper                          v1.0.8            Trivy     31m
krv-system          replicaset-krv-krv-579bffbfc9-krv                                 iao-sq013-pub/k8s-krv                                               0.2.0             Trivy     31m
kube-system         daemonset-797fdf7d6                                               iao-sq013-pub/k8scloudprovider/openstack-cloud-controller-manager   v1.29.0           Trivy     32m
kube-system         daemonset-calico-node-calico-node                                 iao-sq013-pub/calico/node                                           v3.24.5           Trivy     32m
kube-system         daemonset-calico-node-flexvol-driver                              iao-sq013-pub/calico/pod2daemon-flexvol                             v3.24.5           Trivy     32m
kube-system         daemonset-calico-node-install-cni                                 iao-sq013-pub/calico/cni                                            v3.24.5           Trivy     32m
kube-system         daemonset-calico-node-upgrade-ipam                                iao-sq013-pub/calico/cni                                            v3.24.5           Trivy     32m
kube-system         daemonset-csi-cinder-nodeplugin-cinder-csi-plugin                 iao-sq013-pub/k8scloudprovider/cinder-csi-plugin                    v1.29.0           Trivy     31m
kube-system         daemonset-csi-cinder-nodeplugin-liveness-probe                    iao-sq013-pub/sig-storage/livenessprobe                             v2.5.0            Trivy     31m
kube-system         daemonset-csi-cinder-nodeplugin-node-driver-registrar             iao-sq013-pub/sig-storage/csi-node-driver-registrar                 v2.4.0            Trivy     31m
kube-system         daemonset-k8s-ldap-webhook-k8s-ldap-webhook                       iao-sq013-pub/kubernetes/k8s-ldap-webhook                           1.2.2             Trivy     31m
kube-system         daemonset-kube-proxy-kube-proxy                                   iao-sq013-pub/kube-proxy                                            v1.25.5           Trivy     31m
kube-system         daemonset-nodelocaldns-node-cache                                 iao-sq013-pub/dns/k8s-dns-node-cache                                1.21.1            Trivy     31m
kube-system         daemonset-opa-opa                                                 iao-sq013-pub/openpolicyagent/opa                                   0.44.0-rootless   Trivy     31m
kube-system         daemonset-restic-restic                                           iao-sq013-pub/velero/velero                                         v1.8.1            Trivy     31m
kube-system         pod-kube-apiserver-vncub8663-kube-apiserver                       iao-sq013-pub/kube-apiserver                                        v1.25.5           Trivy     33m
kube-system         pod-kube-apiserver-vncub8664-kube-apiserver                       iao-sq013-pub/kube-apiserver                                        v1.25.5           Trivy     32m
kube-system         pod-kube-apiserver-vncub8665-kube-apiserver                       iao-sq013-pub/kube-apiserver                                        v1.25.5           Trivy     32m
kube-system         pod-kube-controller-manager-vncub8663-kube-controller-manager     iao-sq013-pub/kube-controller-manager                               v1.25.5           Trivy     31m
kube-system         pod-kube-controller-manager-vncub8664-kube-controller-manager     iao-sq013-pub/kube-controller-manager                               v1.25.5           Trivy     31m
kube-system         pod-kube-controller-manager-vncub8665-kube-controller-manager     iao-sq013-pub/kube-controller-manager                               v1.25.5           Trivy     31m
kube-system         pod-kube-scheduler-vncub8663-kube-scheduler                       iao-sq013-pub/kube-scheduler                                        v1.25.5           Trivy     31m
kube-system         pod-kube-scheduler-vncub8664-kube-scheduler                       iao-sq013-pub/kube-scheduler                                        v1.25.5           Trivy     31m
kube-system         pod-kube-scheduler-vncub8665-kube-scheduler                       iao-sq013-pub/kube-scheduler                                        v1.25.5           Trivy     31m
kube-system         pod-nginx-proxy-vncub13205-nginx-proxy                            iao-sq013-pub/nginx                                                 1.23.2-alpine     Trivy     30m
kube-system         pod-nginx-proxy-vncub8666-nginx-proxy                             iao-sq013-pub/nginx                                                 1.23.2-alpine     Trivy     30m
kube-system         pod-nginx-proxy-vncub8667-nginx-proxy                             iao-sq013-pub/nginx                                                 1.23.2-alpine     Trivy     30m
kube-system         replicaset-54d4cccf4c                                             iao-sq013-pub/k8scloudprovider/cinder-csi-plugin                    v1.29.0           Trivy     31m
kube-system         replicaset-5bd8bb74d6                                             iao-sq013-pub/kubernetes/kube-rbac-proxy                            v0.15.0           Trivy     30m
kube-system         replicaset-5cc54df6c5                                             iao-sq013-pub/sig-storage/csi-snapshotter                           v5.0.0            Trivy     31m
kube-system         replicaset-5fb45fff9d                                             iao-sq013-pub/sig-storage/livenessprobe                             v2.5.0            Trivy     31m
kube-system         replicaset-6bb8f8944d                                             iao-sq013-pub/k8s-system-operator                                   0.0.21            Trivy     30m
kube-system         replicaset-6cbb9cb84d                                             iao-sq013-pub/calico/kube-controllers                               v3.24.5           Trivy     31m
kube-system         replicaset-7c57595d56                                             iao-sq013-pub/sig-storage/csi-provisioner                           v3.0.0            Trivy     31m
kube-system         replicaset-7d44d446b                                              ps-sq002-pub/speed/k8s-admission-webhook                            1.12.0            Trivy     31m
kube-system         replicaset-coredns-74b6678d75-coredns                             iao-sq013-pub/coredns/coredns                                       v1.9.3            Trivy     30m
kube-system         replicaset-csi-cinder-controllerplugin-86569685c4-csi-attacher    iao-sq013-pub/sig-storage/csi-attacher                              v3.3.0            Trivy     31m
kube-system         replicaset-csi-cinder-controllerplugin-86569685c4-csi-resizer     iao-sq013-pub/sig-storage/csi-resizer                               v1.3.0            Trivy     31m
kube-system         replicaset-dns-autoscaler-9dc87d9b4-autoscaler                    iao-sq013-pub/cpa/cluster-proportional-autoscaler-amd64             1.8.5             Trivy     30m
kube-system         replicaset-kube-metrics-adapter-5984dc449d-kube-metrics-adapter   iao-sq013-pub/kube-metrics-adapter/kube-metrics-adapter             v0.2.1            Trivy     30m
kube-system         replicaset-metrics-server-7f5676cd47-metrics-server               iao-sq013-pub/metrics-server/metrics-server                         v0.6.4            Trivy     30m
kube-system         replicaset-snapshot-controller-7549c6fdd8-snapshot-controller     iao-sq013-pub/sig-storage/snapshot-controller                       v4.2.1            Trivy     30m
kube-system         replicaset-velero-6dd8ff5985-velero                               iao-sq013-pub/velero/velero                                         v1.8.1            Trivy     30m
kube-system         replicaset-velero-6dd8ff5985-velero-plugin-for-aws                iao-sq013-pub/velero/velero-plugin-for-aws                          v1.3.0            Trivy     30m
monitoring-system   daemonset-monitoring-prometheus-node-exporter-node-exporter       iao-sq002-pub/prometheus/node-exporter                              v1.6.1            Trivy     31m
monitoring-system   replicaset-5f6c44c577                                             iao-sq002-pub/library/telegraf                                      1.24.4            Trivy     30m
monitoring-system   replicaset-5fd8889ff7                                             iao-sq002-pub/filewatcher/filewatcher                               v1.0.1            Trivy     30m
monitoring-system   replicaset-6f555b4cc                                              iao-sq002-pub/prometheus/prometheus-config-reloader                 v0.67.0           Trivy     30m
monitoring-system   replicaset-7cd4f7799                                              iao-sq002-pub/kube-state-metrics/kube-state-metrics                 2.10.0            Trivy     30m
monitoring-system   replicaset-8454f89f97                                             iao-sq002-pub/busybox/busybox                                       1.29              Trivy     30m
monitoring-system   replicaset-858fccdcd                                              iao-sq002-pub/prometheus/prometheus                                 v2.47.0           Trivy     30m
monitoring-system   replicaset-8675d5b859                                             iao-sq002-pub/prometheus/prometheus-config-reloader                 v0.67.0           Trivy     30m
monitoring-system   replicaset-86d66c4b7d                                             iao-sq002-pub/busybox/busybox                                       1.29              Trivy     30m
monitoring-system   replicaset-9b9cf967b                                              iao-sq002-pub/prometheus/prometheus                                 v2.47.0           Trivy     30m
polaris-system      replicaset-polaris-polaris-dashboard-77c775567f-dashboard         iao-sq013-pub/fairwinds/polaris                                     7.0.2             Trivy     30m
trivy-system        replicaset-trivy-operator-59476dbf85-trivy-operator               iao-sq013-pub/aquasecurity/trivy-operator                           0.18.1            Trivy     30m
e57toc@vncub17999:~ $

But as expected... I am missing the sbomreports now.
Is it possible to receive both exposedsecrets and sbomreports? Is this an expected behaviour or bug?
Thank you

[chen-keinan]

Yes, just upgrade to latest and disable only this flag

[xzizka]

I will try that. Thank you.