weird error with ClusterSbomReport and RKE2

[sylvainOL]

Hello,
I'm using RKE2 and I'm trying to make trivy operator to work on it.
I've got many questions and I'm doing a thread per questions ^_^:

here's the values.yaml that I'm giving (I'm using trivy operator chart version 0.20.1 which uses version 0.18.1 of operator):

---
excludeNamespaces: "{{ .Release.Namespace }}"
image:
  pullPolicy: Always

nodeCollector:
  volumes:
    - hostPath:
        path: /var/lib/rancher/rke2/server/db
      name: var-lib-etcd
    - hostPath:
        path: /var/lib/kubelet
      name: var-lib-kubelet
    - hostPath:
        path: /var/lib/kube-scheduler
      name: var-lib-kube-scheduler
    - hostPath:
        path: /var/lib/kube-controller-manager
      name: var-lib-kube-controller-manager
    - hostPath:
        path: /etc/systemd
      name: etc-systemd
    - hostPath:
        path: /lib/systemd
      name: lib-systemd
    - hostPath:
        path: /var/lib/rancher/rke2/server/
      name: etc-kubernetes
    - hostPath:
        path: /etc/cni/net.d/
      name: etc-cni-netd

operator:
  builtInTrivyServer: true
  clusterComplianceEnabled: true
  clusterSbomCacheEnabled: true
  exposedSecretScannerEnabled: true
  logDevMode: true
  metricsClusterComplianceInfo: true
  metricsImageInfo: true
  metricsVulnIdEnabled: true
  sbomGenerationEnabled: true
  scanJobTimeout: 5m
  # no need to stress the cluster when it is reconciling
  scanJobsConcurrentLimit: 3
  scanJobsRetryDelay: 120s
  scanNodeCollectorLimit: 3
  vulnerabilityScannerReportTTL: 48h

podAnnotations:
  proxy.istio.io/config: '{ "holdApplicationUntilProxyStarts": true }'

podSecurityContext:
  runAsGroup: 10000
  runAsUser: 10000
  seccompProfile:
    type: RuntimeDefault

resources:
  limits:
    ephemeral-storage: 100Mi
    memory: 512Mi
  requests:
    cpu: 50m
    ephemeral-storage: 100Mi
    memory: 512Mi

securityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
      - ALL
  privileged: false
  readOnlyRootFilesystem: true
  runAsNonRoot: true

serviceAccount:
  annotations: {}
  create: true
  name: "trivy-operator"

trivy:
  # renovate: datasource=docker
  imageRef: docker.io/aquasec/trivy:0.48.2
  resources:
    limits:
      ephemeral-storage: 100Mi
      memory: 1Gi
    requests:
      cpu: 100m
      ephemeral-storage: 100Mi
      memory: 512Mi
  storageClassName: hdd

trivyOperator:
  scanJobPodTemplateContainerSecurityContext:
    allowPrivilegeEscalation: false
    capabilities:
      drop:
        - ALL
    privileged: false
    readOnlyRootFilesystem: true
    runAsNonRoot: true
  scanJobPodTemplatePodSecurityContext:
    runAsGroup: 10000
    runAsUser: 10000
    seccompProfile:
      type: RuntimeDefault
  scanJobTolerations:
    - effect: NoSchedule
      operator: Exists
    - effect: NoExecute
      key: CriticalAddonsOnly
      value: "true"

When launched, I've got the following error on ClusterSbomReport:

{
  "level": "error",
  "ts": "2024-01-11T13:10:52Z",
  "msg": "Reconciler error",
  "controller": "clustersbomreport",
  "controllerGroup": "aquasecurity.github.io",
  "controllerKind": "ClusterSbomReport",
  "ClusterSbomReport": { "name": "7df97f4998" },
  "namespace": "",
  "name": "7df97f4998",
  "reconcileID": "b315c4cc-0af1-4a2c-a37b-9f72d2403986",
  "error": "constructing scan job: could not parse reference: k8s.io/kubernetes:1.28.5+rke2r1",
  "stacktrace": "sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:329\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/home/runner/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:227"
}

here's the clustersbom generated:

apiVersion: aquasecurity.github.io/v1alpha1
kind: ClusterSbomReport
metadata:
  creationTimestamp: "2024-01-11T16:31:43Z"
  generation: 2
  labels:
    resource-image-id: 7df97f4998
    trivy-operator.aquasecurity.github.io/sbom-type: kbom
  name: 7df97f4998
  resourceVersion: "79688598"
  uid: b00e7291-ee28-4675-8cd5-a73ddc2e894f
report:
  artifact:
    repository: kubernetes
    tag: 1.28.5+rke2r1
  components:
    bomFormat: CycloneDX
    components:
    - bom-ref: 09024f81-94af-46a1-afe0-fc69bdc6cd4b
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: 0cabc327-3348-490c-998a-c4a05388e7d1
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: 101c46a5-dbe9-4d75-ac01-9f9339467b1a
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: 17ad6ad4-9514-40ea-bfea-b6536da6147c
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: 25190073-1f0a-4e6d-b61c-d72e80cdbb05
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: 27169e4c-dc33-4aea-81ae-5fad20e73aed
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: 5a957132-e18f-4b66-9b3c-f4d1acb284b7
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: 5db5cb5a-5c14-4a40-bc8f-018760458dda
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: 5ded18dd-24f1-4416-839b-42880e8197d0
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: 67b804d9-c75d-46bc-b909-685634055463
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: 69b49713-76dc-4b85-8791-e15eca183cd1
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: 6c9dbaee-e51f-42a1-ab7f-250750bb4609
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: 740a21db-4783-4a33-9a03-b51ddafa4103
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: 7634f1e4-b437-4eba-b6ca-6fa44010b7c6
      name: control01-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: control01-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: master
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: control01-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: 767bda3e-422f-486c-9407-993bc8e3d87c
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: 7bf9a850-35e3-465b-9fcf-d9d1e82428e0
      name: control03-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: control03-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: master
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: control03-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: 7e154c2c-3729-4bd0-81fa-f717ac69a1b7
      name: compute02-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: compute02-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: worker
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: compute02-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: 944e4b9d-0843-41a5-87cc-3a1be0344ac6
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: 9863ac22-dbd1-410b-93ac-18012afdba33
      name: control02-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: control02-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: master
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: control02-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: 9baaf91e-60be-4ea9-a8da-2cf864cd727c
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: a656d61a-4b8e-4967-b4c6-5bf9f4dcf66d
      name: compute01-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: compute01-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: worker
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: compute01-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: a80eba71-713a-4f0f-8304-7ffdae8a9ef0
      name: compute05-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: compute05-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: worker
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: compute05-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: bd82ff0a-142e-4e7c-9401-7f8804e746dc
      name: node-core-components
      properties:
      - name: aquasecurity:trivy:Class
        value: lang-pkgs
      - name: aquasecurity:trivy:Type
        value: golang
      supplier: {}
      type: application
    - bom-ref: e1e5668b-368e-48ab-84a7-9861a414c497
      name: ubuntu
      properties:
      - name: aquasecurity:trivy:Class
        value: os-pkgs
      - name: aquasecurity:trivy:Type
        value: ubuntu
      supplier: {}
      type: operating-system
      version: 22.04.3
    - bom-ref: e6eb9733-b49a-4890-a328-666e5adfdfd7
      name: compute03-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: compute03-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: worker
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: compute03-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: ea2a271e-cf2d-4cea-9a3c-c2ef0e7305b9
      name: compute04-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: compute04-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: worker
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: compute04-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: f72e1008-b875-4546-9642-a10435a846c0
      name: compute06-nif-sylvain-desbureaux-innovation
      properties:
      - name: aquasecurity:trivy:Architecture
        value: amd64
      - name: aquasecurity:trivy:HostName
        value: compute06-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:KernelVersion
        value: 5.15.0-91-generic
      - name: aquasecurity:trivy:NodeRole
        value: worker
      - name: aquasecurity:trivy:OperatingSystem
        value: linux
      - name: aquasecurity:trivy:resource:Name
        value: compute06-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      supplier: {}
      type: platform
    - bom-ref: pkg:golang/github.com%2Fcontainerd%[email protected]
      name: github.com/containerd/containerd
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: github.com/containerd/containerd
      - name: aquasecurity:trivy:resource:Type
        value: node
      purl: pkg:golang/github.com%2Fcontainerd%[email protected]
      supplier: {}
      type: application
      version: 1.7.11-k3s2
    - bom-ref: pkg:k8s/[email protected]
      name: cilium
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: cilium-zq9xl
      purl: pkg:k8s/[email protected]
      supplier: {}
      type: application
      version: 1.14.4
    - bom-ref: pkg:k8s/cloud-controller-manager
      name: cloud-controller-manager
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: cloud-controller-manager-control03-nif-sylvain-desbureaux-innovation
      purl: pkg:k8s/cloud-controller-manager
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/controllerplugin
      name: controllerplugin
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: cinder-csi-controllerplugin-798f6545c5-sh8p5
      purl: pkg:k8s/controllerplugin
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/[email protected]
      name: exporter
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: harbor-exporter-7b59868b79-47z6w
      purl: pkg:k8s/[email protected]
      supplier: {}
      type: application
      version: 2.10.0
    - bom-ref: pkg:k8s/go.etcd.io%2Fetcd%[email protected]
      name: go.etcd.io/etcd/v3
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: etcd-control03-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: controlPlane
      purl: pkg:k8s/go.etcd.io%2Fetcd%[email protected]
      supplier: {}
      type: application
      version: 3.5.9-k3s1-build20230802
    - bom-ref: pkg:k8s/hubble-relay
      name: hubble-relay
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: hubble-relay-78f875c79b-x7gsh
      purl: pkg:k8s/hubble-relay
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/hubble-ui
      name: hubble-ui
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: hubble-ui-ffb948997-88m2m
      purl: pkg:k8s/hubble-ui
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/istio-cni-node
      name: istio-cni-node
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: istio-cni-node-r96b8
      purl: pkg:k8s/istio-cni-node
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/[email protected]
      name: jobservice
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: harbor-jobservice-765f49464c-5fc4k
      purl: pkg:k8s/[email protected]
      supplier: {}
      type: application
      version: 2.10.0
    - bom-ref: pkg:k8s/k8s.io%2Fcontroller-manager
      name: k8s.io/controller-manager
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: kube-controller-manager-control01-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: controlPlane
      purl: pkg:k8s/k8s.io%2Fcontroller-manager
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/k8s.io%2Fkube-proxy
      name: k8s.io/kube-proxy
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: kube-proxy-compute06-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: node
      purl: pkg:k8s/k8s.io%2Fkube-proxy
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/k8s.io%2Fkube-scheduler
      name: k8s.io/kube-scheduler
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: kube-scheduler-control03-nif-sylvain-desbureaux-innovation
      - name: aquasecurity:trivy:resource:Type
        value: controlPlane
      purl: pkg:k8s/k8s.io%2Fkube-scheduler
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/kube-dns
      name: kube-dns
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: rke2-coredns-rke2-coredns-5696694ddc-9f6sm
      purl: pkg:k8s/kube-dns
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/nodeplugin
      name: nodeplugin
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: cinder-csi-nodeplugin-qx4hg
      purl: pkg:k8s/nodeplugin
      supplier: {}
      type: application
    - bom-ref: pkg:k8s/[email protected]
      name: portal
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: harbor-portal-5755994d7d-nkg4l
      purl: pkg:k8s/[email protected]
      supplier: {}
      type: application
      version: 2.10.0
    - bom-ref: pkg:k8s/[email protected]
      name: registry
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: harbor-registry-5464669d59-7k9vg
      purl: pkg:k8s/[email protected]
      supplier: {}
      type: application
      version: 2.10.0
    - bom-ref: pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      name: k8s.io/kubelet
      properties:
      - name: aquasecurity:trivy:resource:Name
        value: k8s.io/kubelet
      - name: aquasecurity:trivy:resource:Type
        value: node
      purl: pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      supplier: {}
      type: application
      version: 1.28.5+rke2r1
    - bom-ref: pkg:oci/cinder-csi-plugin@sha256%3Acc9eb1d19550167e688a2bffe64971f2a378ee2973aab6b7f8c04de381af4321?repository_url=registry.k8s.io%2Fprovider-os%2Fcinder-csi-plugin
      name: registry.k8s.io/provider-os/cinder-csi-plugin
      properties:
      - name: aquasecurity:trivy:PkgID
        value: registry.k8s.io/provider-os/cinder-csi-plugin:1.28.1
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/cinder-csi-plugin@sha256%3Acc9eb1d19550167e688a2bffe64971f2a378ee2973aab6b7f8c04de381af4321?repository_url=registry.k8s.io%2Fprovider-os%2Fcinder-csi-plugin
      supplier: {}
      type: container
      version: sha256:cc9eb1d19550167e688a2bffe64971f2a378ee2973aab6b7f8c04de381af4321
    - bom-ref: pkg:oci/csi-attacher@sha256%3A34cf9b32736c6624fc9787fb149ea6e0fbeb45415707ac2f6440ac960f1116e6?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-attacher
      name: registry.k8s.io/sig-storage/csi-attacher
      properties:
      - name: aquasecurity:trivy:PkgID
        value: registry.k8s.io/sig-storage/csi-attacher:4.2.0
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/csi-attacher@sha256%3A34cf9b32736c6624fc9787fb149ea6e0fbeb45415707ac2f6440ac960f1116e6?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-attacher
      supplier: {}
      type: container
      version: sha256:34cf9b32736c6624fc9787fb149ea6e0fbeb45415707ac2f6440ac960f1116e6
    - bom-ref: pkg:oci/csi-node-driver-registrar@sha256%3Aa13bff2ed69af0cf4270f0cf47bdedf75a56c095cd95b91195ae6c713a9b1845?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-node-driver-registrar
      name: registry.k8s.io/sig-storage/csi-node-driver-registrar
      properties:
      - name: aquasecurity:trivy:PkgID
        value: registry.k8s.io/sig-storage/csi-node-driver-registrar:2.6.2
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/csi-node-driver-registrar@sha256%3Aa13bff2ed69af0cf4270f0cf47bdedf75a56c095cd95b91195ae6c713a9b1845?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-node-driver-registrar
      supplier: {}
      type: container
      version: sha256:a13bff2ed69af0cf4270f0cf47bdedf75a56c095cd95b91195ae6c713a9b1845
    - bom-ref: pkg:oci/csi-provisioner@sha256%3A893e37a388e7a7463d6c3523311b28cfbc5ae536dbef35430eed272cdc6850dc?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-provisioner
      name: registry.k8s.io/sig-storage/csi-provisioner
      properties:
      - name: aquasecurity:trivy:PkgID
        value: registry.k8s.io/sig-storage/csi-provisioner:3.4.1
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/csi-provisioner@sha256%3A893e37a388e7a7463d6c3523311b28cfbc5ae536dbef35430eed272cdc6850dc?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-provisioner
      supplier: {}
      type: container
      version: sha256:893e37a388e7a7463d6c3523311b28cfbc5ae536dbef35430eed272cdc6850dc
    - bom-ref: pkg:oci/csi-resizer@sha256%3A2e2b44393539d744a55b9370b346e8ebd95a77573064f3f9a8caf18c22f4d0d0?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-resizer
      name: registry.k8s.io/sig-storage/csi-resizer
      properties:
      - name: aquasecurity:trivy:PkgID
        value: registry.k8s.io/sig-storage/csi-resizer:1.8.0
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/csi-resizer@sha256%3A2e2b44393539d744a55b9370b346e8ebd95a77573064f3f9a8caf18c22f4d0d0?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-resizer
      supplier: {}
      type: container
      version: sha256:2e2b44393539d744a55b9370b346e8ebd95a77573064f3f9a8caf18c22f4d0d0
    - bom-ref: pkg:oci/csi-snapshotter@sha256%3A03693292701b95d177b45c9e4d752025e6214de3ef8695e30d0001f36ec8f5e6?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-snapshotter
      name: registry.k8s.io/sig-storage/csi-snapshotter
      properties:
      - name: aquasecurity:trivy:PkgID
        value: registry.k8s.io/sig-storage/csi-snapshotter:6.2.1
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/csi-snapshotter@sha256%3A03693292701b95d177b45c9e4d752025e6214de3ef8695e30d0001f36ec8f5e6?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-snapshotter
      supplier: {}
      type: container
      version: sha256:03693292701b95d177b45c9e4d752025e6214de3ef8695e30d0001f36ec8f5e6
    - bom-ref: pkg:oci/harbor-exporter@sha256%3A25547cc618c6828c982f246201e1c172604cccc8985ce6671171ff3b0a1a2a83?repository_url=index.docker.io%2Fgoharbor%2Fharbor-exporter
      name: index.docker.io/goharbor/harbor-exporter
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/goharbor/harbor-exporter:2.10.0
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/harbor-exporter@sha256%3A25547cc618c6828c982f246201e1c172604cccc8985ce6671171ff3b0a1a2a83?repository_url=index.docker.io%2Fgoharbor%2Fharbor-exporter
      supplier: {}
      type: container
      version: sha256:25547cc618c6828c982f246201e1c172604cccc8985ce6671171ff3b0a1a2a83
    - bom-ref: pkg:oci/harbor-jobservice@sha256%3Abc65169ad4137d892ec481c930bdd1f07326cafc7b9367bee9ebddb2b08a7d42?repository_url=index.docker.io%2Fgoharbor%2Fharbor-jobservice
      name: index.docker.io/goharbor/harbor-jobservice
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/goharbor/harbor-jobservice:2.10.0
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/harbor-jobservice@sha256%3Abc65169ad4137d892ec481c930bdd1f07326cafc7b9367bee9ebddb2b08a7d42?repository_url=index.docker.io%2Fgoharbor%2Fharbor-jobservice
      supplier: {}
      type: container
      version: sha256:bc65169ad4137d892ec481c930bdd1f07326cafc7b9367bee9ebddb2b08a7d42
    - bom-ref: pkg:oci/harbor-portal@sha256%3Aac1382afbbce74e196bec839ac1b10caf95664f9c831e83dbd240859ca3db0df?repository_url=index.docker.io%2Fgoharbor%2Fharbor-portal
      name: index.docker.io/goharbor/harbor-portal
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/goharbor/harbor-portal:2.10.0
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/harbor-portal@sha256%3Aac1382afbbce74e196bec839ac1b10caf95664f9c831e83dbd240859ca3db0df?repository_url=index.docker.io%2Fgoharbor%2Fharbor-portal
      supplier: {}
      type: container
      version: sha256:ac1382afbbce74e196bec839ac1b10caf95664f9c831e83dbd240859ca3db0df
    - bom-ref: pkg:oci/harbor-registryctl@sha256%3A78c2ff95fa1fcd0160b0dda57e48c7dfc5c9d63f40568d677f7fa2ea56814412?repository_url=index.docker.io%2Fgoharbor%2Fharbor-registryctl
      name: index.docker.io/goharbor/harbor-registryctl
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/goharbor/harbor-registryctl:2.10.0
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/harbor-registryctl@sha256%3A78c2ff95fa1fcd0160b0dda57e48c7dfc5c9d63f40568d677f7fa2ea56814412?repository_url=index.docker.io%2Fgoharbor%2Fharbor-registryctl
      supplier: {}
      type: container
      version: sha256:78c2ff95fa1fcd0160b0dda57e48c7dfc5c9d63f40568d677f7fa2ea56814412
    - bom-ref: pkg:oci/hardened-coredns@sha256%3A99513a1cabd6fe947a3df0eb03f3d22ef8fbfba91e555d78959eefd20201de65?repository_url=index.docker.io%2Francher%2Fhardened-coredns
      name: index.docker.io/rancher/hardened-coredns
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/rancher/hardened-coredns:1.10.1-build20231009
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/hardened-coredns@sha256%3A99513a1cabd6fe947a3df0eb03f3d22ef8fbfba91e555d78959eefd20201de65?repository_url=index.docker.io%2Francher%2Fhardened-coredns
      supplier: {}
      type: container
      version: sha256:99513a1cabd6fe947a3df0eb03f3d22ef8fbfba91e555d78959eefd20201de65
    - bom-ref: pkg:oci/hardened-etcd@sha256%3Ac6b7a4f2f79b24f9310e769ce7c1e0caba47fbf2d03a2025b19bee2090dae94d?repository_url=index.docker.io%2Francher%2Fhardened-etcd
      name: index.docker.io/rancher/hardened-etcd
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/rancher/hardened-etcd:3.5.9-k3s1-build20230802
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/hardened-etcd@sha256%3Ac6b7a4f2f79b24f9310e769ce7c1e0caba47fbf2d03a2025b19bee2090dae94d?repository_url=index.docker.io%2Francher%2Fhardened-etcd
      supplier: {}
      type: container
      version: sha256:c6b7a4f2f79b24f9310e769ce7c1e0caba47fbf2d03a2025b19bee2090dae94d
    - bom-ref: pkg:oci/hardened-kubernetes@sha256%3A4fc10f59baf2c2fc2b8b80a33beec125050d0f749e82130de3fa483e43a90279?repository_url=index.docker.io%2Francher%2Fhardened-kubernetes
      name: index.docker.io/rancher/hardened-kubernetes
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/rancher/hardened-kubernetes:1.28.5-rke2r1-build20231220
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/hardened-kubernetes@sha256%3A4fc10f59baf2c2fc2b8b80a33beec125050d0f749e82130de3fa483e43a90279?repository_url=index.docker.io%2Francher%2Fhardened-kubernetes
      supplier: {}
      type: container
      version: sha256:4fc10f59baf2c2fc2b8b80a33beec125050d0f749e82130de3fa483e43a90279
    - bom-ref: pkg:oci/install-cni@sha256%3Afc658db24db645a3b921881bcb57a8e2b050fdecb0471828e9b667dd42870bd4?repository_url=index.docker.io%2Fistio%2Finstall-cni
      name: index.docker.io/istio/install-cni
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/istio/install-cni:1.20.2
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/install-cni@sha256%3Afc658db24db645a3b921881bcb57a8e2b050fdecb0471828e9b667dd42870bd4?repository_url=index.docker.io%2Fistio%2Finstall-cni
      supplier: {}
      type: container
      version: sha256:fc658db24db645a3b921881bcb57a8e2b050fdecb0471828e9b667dd42870bd4
    - bom-ref: pkg:oci/livenessprobe@sha256%3A2b10b24dafdc3ba94a03fc94d9df9941ca9d6a9207b927f5dfd21d59fbe05ba0?repository_url=registry.k8s.io%2Fsig-storage%2Flivenessprobe
      name: registry.k8s.io/sig-storage/livenessprobe
      properties:
      - name: aquasecurity:trivy:PkgID
        value: registry.k8s.io/sig-storage/livenessprobe:2.9.0
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/livenessprobe@sha256%3A2b10b24dafdc3ba94a03fc94d9df9941ca9d6a9207b927f5dfd21d59fbe05ba0?repository_url=registry.k8s.io%2Fsig-storage%2Flivenessprobe
      supplier: {}
      type: container
      version: sha256:2b10b24dafdc3ba94a03fc94d9df9941ca9d6a9207b927f5dfd21d59fbe05ba0
    - bom-ref: pkg:oci/mirrored-cilium-cilium@sha256%3A59f2a336d264ddeb3727dcdb4ba300d6838cf9a5484b55f321ef11611444b4fb?repository_url=index.docker.io%2Francher%2Fmirrored-cilium-cilium
      name: index.docker.io/rancher/mirrored-cilium-cilium
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/rancher/mirrored-cilium-cilium:1.14.4
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/mirrored-cilium-cilium@sha256%3A59f2a336d264ddeb3727dcdb4ba300d6838cf9a5484b55f321ef11611444b4fb?repository_url=index.docker.io%2Francher%2Fmirrored-cilium-cilium
      supplier: {}
      type: container
      version: sha256:59f2a336d264ddeb3727dcdb4ba300d6838cf9a5484b55f321ef11611444b4fb
    - bom-ref: pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
      name: index.docker.io/istio/proxyv2
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/istio/proxyv2:1.20.2
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
      supplier: {}
      type: container
      version: sha256:5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c
    - bom-ref: pkg:oci/registry-photon@sha256%3A720af7db57976fd4f19a3d541812362c5199cc9c277595394754f566a7cdabf5?repository_url=index.docker.io%2Fgoharbor%2Fregistry-photon
      name: index.docker.io/goharbor/registry-photon
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/goharbor/registry-photon:2.10.0
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/registry-photon@sha256%3A720af7db57976fd4f19a3d541812362c5199cc9c277595394754f566a7cdabf5?repository_url=index.docker.io%2Fgoharbor%2Fregistry-photon
      supplier: {}
      type: container
      version: sha256:720af7db57976fd4f19a3d541812362c5199cc9c277595394754f566a7cdabf5
    - bom-ref: pkg:oci/rke2-cloud-provider@sha256%3A00bad7e3c2263e3ef9e6231031a05929d9e2a56c6b87c89ad8cae6cc8ef8befe?repository_url=index.docker.io%2Francher%2Frke2-cloud-provider
      name: index.docker.io/rancher/rke2-cloud-provider
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/rancher/rke2-cloud-provider:1.28.2-build20231016
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/rke2-cloud-provider@sha256%3A00bad7e3c2263e3ef9e6231031a05929d9e2a56c6b87c89ad8cae6cc8ef8befe?repository_url=index.docker.io%2Francher%2Frke2-cloud-provider
      supplier: {}
      type: container
      version: sha256:00bad7e3c2263e3ef9e6231031a05929d9e2a56c6b87c89ad8cae6cc8ef8befe
    - bom-ref: pkg:oci/sha256@sha256%3A1f86f3400827a0451e6332262467f894eeb7caf0eb8779bd951e2caa9d027cbe?repository_url=index.docker.io%2Flibrary%2Fsha256
      name: index.docker.io/library/sha256
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/library/sha256:b599a0e0d692753fda40236d7b740c32001157cc2687573a2bae880648604016
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/sha256@sha256%3A1f86f3400827a0451e6332262467f894eeb7caf0eb8779bd951e2caa9d027cbe?repository_url=index.docker.io%2Flibrary%2Fsha256
      supplier: {}
      type: container
      version: sha256:1f86f3400827a0451e6332262467f894eeb7caf0eb8779bd951e2caa9d027cbe
    - bom-ref: pkg:oci/sha256@sha256%3A9e5f81ee747866480ea1ac4630eb6975ff9227f9782b7c93919c081c33f38267?repository_url=index.docker.io%2Flibrary%2Fsha256
      name: index.docker.io/library/sha256
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/library/sha256:fcdd1b69b2df9e51bab88ba1d559a3db480ffe01f59889bffb1fe7c461b90b9e
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/sha256@sha256%3A9e5f81ee747866480ea1ac4630eb6975ff9227f9782b7c93919c081c33f38267?repository_url=index.docker.io%2Flibrary%2Fsha256
      supplier: {}
      type: container
      version: sha256:9e5f81ee747866480ea1ac4630eb6975ff9227f9782b7c93919c081c33f38267
    - bom-ref: pkg:oci/sha256@sha256%3Adbef89f924a927043d02b40c18e417c1ea0e8f58b44523b80fef7e3652db24d4?repository_url=index.docker.io%2Flibrary%2Fsha256
      name: index.docker.io/library/sha256
      properties:
      - name: aquasecurity:trivy:PkgID
        value: index.docker.io/library/sha256:ae0e1ff75260c175a63d773ad484681cdb36e7664b29b7f784a2d047cfb6b5d5
      - name: aquasecurity:trivy:PkgType
        value: oci
      purl: pkg:oci/sha256@sha256%3Adbef89f924a927043d02b40c18e417c1ea0e8f58b44523b80fef7e3652db24d4?repository_url=index.docker.io%2Flibrary%2Fsha256
      supplier: {}
      type: container
      version: sha256:dbef89f924a927043d02b40c18e417c1ea0e8f58b44523b80fef7e3652db24d4
    dependencies:
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: 09024f81-94af-46a1-afe0-fc69bdc6cd4b
    - dependsOn: []
      ref: 0cabc327-3348-490c-998a-c4a05388e7d1
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: 101c46a5-dbe9-4d75-ac01-9f9339467b1a
    - dependsOn: []
      ref: 17ad6ad4-9514-40ea-bfea-b6536da6147c
    - dependsOn: []
      ref: 25190073-1f0a-4e6d-b61c-d72e80cdbb05
    - dependsOn: []
      ref: 27169e4c-dc33-4aea-81ae-5fad20e73aed
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: 5a957132-e18f-4b66-9b3c-f4d1acb284b7
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: 5db5cb5a-5c14-4a40-bc8f-018760458dda
    - dependsOn: []
      ref: 5ded18dd-24f1-4416-839b-42880e8197d0
    - dependsOn: []
      ref: 67b804d9-c75d-46bc-b909-685634055463
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: 69b49713-76dc-4b85-8791-e15eca183cd1
    - dependsOn: []
      ref: 6c9dbaee-e51f-42a1-ab7f-250750bb4609
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: 740a21db-4783-4a33-9a03-b51ddafa4103
    - dependsOn:
      - 09024f81-94af-46a1-afe0-fc69bdc6cd4b
      - 27169e4c-dc33-4aea-81ae-5fad20e73aed
      ref: 7634f1e4-b437-4eba-b6ca-6fa44010b7c6
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: 767bda3e-422f-486c-9407-993bc8e3d87c
    - dependsOn:
      - 25190073-1f0a-4e6d-b61c-d72e80cdbb05
      - bd82ff0a-142e-4e7c-9401-7f8804e746dc
      ref: 7bf9a850-35e3-465b-9fcf-d9d1e82428e0
    - dependsOn:
      - 5a957132-e18f-4b66-9b3c-f4d1acb284b7
      - 6c9dbaee-e51f-42a1-ab7f-250750bb4609
      ref: 7e154c2c-3729-4bd0-81fa-f717ac69a1b7
    - dependsOn: []
      ref: 944e4b9d-0843-41a5-87cc-3a1be0344ac6
    - dependsOn:
      - 0cabc327-3348-490c-998a-c4a05388e7d1
      - 767bda3e-422f-486c-9407-993bc8e3d87c
      ref: 9863ac22-dbd1-410b-93ac-18012afdba33
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: 9baaf91e-60be-4ea9-a8da-2cf864cd727c
    - dependsOn:
      - 9baaf91e-60be-4ea9-a8da-2cf864cd727c
      - e1e5668b-368e-48ab-84a7-9861a414c497
      ref: a656d61a-4b8e-4967-b4c6-5bf9f4dcf66d
    - dependsOn:
      - 17ad6ad4-9514-40ea-bfea-b6536da6147c
      - 69b49713-76dc-4b85-8791-e15eca183cd1
      ref: a80eba71-713a-4f0f-8304-7ffdae8a9ef0
    - dependsOn:
      - pkg:golang/github.com%2Fcontainerd%[email protected]
      - pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
      ref: bd82ff0a-142e-4e7c-9401-7f8804e746dc
    - dependsOn: []
      ref: e1e5668b-368e-48ab-84a7-9861a414c497
    - dependsOn:
      - 101c46a5-dbe9-4d75-ac01-9f9339467b1a
      - 67b804d9-c75d-46bc-b909-685634055463
      ref: e6eb9733-b49a-4890-a328-666e5adfdfd7
    - dependsOn:
      - 5db5cb5a-5c14-4a40-bc8f-018760458dda
      - 5ded18dd-24f1-4416-839b-42880e8197d0
      ref: ea2a271e-cf2d-4cea-9a3c-c2ef0e7305b9
    - dependsOn:
      - 740a21db-4783-4a33-9a03-b51ddafa4103
      - 944e4b9d-0843-41a5-87cc-3a1be0344ac6
      ref: f72e1008-b875-4546-9642-a10435a846c0
    - dependsOn: []
      ref: pkg:golang/github.com%2Fcontainerd%[email protected]
    - dependsOn:
      - pkg:oci/mirrored-cilium-cilium@sha256%3A59f2a336d264ddeb3727dcdb4ba300d6838cf9a5484b55f321ef11611444b4fb?repository_url=index.docker.io%2Francher%2Fmirrored-cilium-cilium
      ref: pkg:k8s/[email protected]
    - dependsOn:
      - pkg:oci/rke2-cloud-provider@sha256%3A00bad7e3c2263e3ef9e6231031a05929d9e2a56c6b87c89ad8cae6cc8ef8befe?repository_url=index.docker.io%2Francher%2Frke2-cloud-provider
      ref: pkg:k8s/cloud-controller-manager
    - dependsOn:
      - pkg:oci/cinder-csi-plugin@sha256%3Acc9eb1d19550167e688a2bffe64971f2a378ee2973aab6b7f8c04de381af4321?repository_url=registry.k8s.io%2Fprovider-os%2Fcinder-csi-plugin
      - pkg:oci/csi-attacher@sha256%3A34cf9b32736c6624fc9787fb149ea6e0fbeb45415707ac2f6440ac960f1116e6?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-attacher
      - pkg:oci/csi-provisioner@sha256%3A893e37a388e7a7463d6c3523311b28cfbc5ae536dbef35430eed272cdc6850dc?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-provisioner
      - pkg:oci/csi-resizer@sha256%3A2e2b44393539d744a55b9370b346e8ebd95a77573064f3f9a8caf18c22f4d0d0?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-resizer
      - pkg:oci/csi-snapshotter@sha256%3A03693292701b95d177b45c9e4d752025e6214de3ef8695e30d0001f36ec8f5e6?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-snapshotter
      - pkg:oci/livenessprobe@sha256%3A2b10b24dafdc3ba94a03fc94d9df9941ca9d6a9207b927f5dfd21d59fbe05ba0?repository_url=registry.k8s.io%2Fsig-storage%2Flivenessprobe
      ref: pkg:k8s/controllerplugin
    - dependsOn:
      - pkg:oci/harbor-exporter@sha256%3A25547cc618c6828c982f246201e1c172604cccc8985ce6671171ff3b0a1a2a83?repository_url=index.docker.io%2Fgoharbor%2Fharbor-exporter
      - pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
      ref: pkg:k8s/[email protected]
    - dependsOn:
      - pkg:oci/hardened-etcd@sha256%3Ac6b7a4f2f79b24f9310e769ce7c1e0caba47fbf2d03a2025b19bee2090dae94d?repository_url=index.docker.io%2Francher%2Fhardened-etcd
      ref: pkg:k8s/go.etcd.io%2Fetcd%[email protected]
    - dependsOn:
      - pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
      - pkg:oci/sha256@sha256%3Adbef89f924a927043d02b40c18e417c1ea0e8f58b44523b80fef7e3652db24d4?repository_url=index.docker.io%2Flibrary%2Fsha256
      ref: pkg:k8s/hubble-relay
    - dependsOn:
      - pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
      - pkg:oci/sha256@sha256%3A1f86f3400827a0451e6332262467f894eeb7caf0eb8779bd951e2caa9d027cbe?repository_url=index.docker.io%2Flibrary%2Fsha256
      - pkg:oci/sha256@sha256%3A9e5f81ee747866480ea1ac4630eb6975ff9227f9782b7c93919c081c33f38267?repository_url=index.docker.io%2Flibrary%2Fsha256
      ref: pkg:k8s/hubble-ui
    - dependsOn:
      - pkg:oci/install-cni@sha256%3Afc658db24db645a3b921881bcb57a8e2b050fdecb0471828e9b667dd42870bd4?repository_url=index.docker.io%2Fistio%2Finstall-cni
      ref: pkg:k8s/istio-cni-node
    - dependsOn:
      - pkg:oci/harbor-jobservice@sha256%3Abc65169ad4137d892ec481c930bdd1f07326cafc7b9367bee9ebddb2b08a7d42?repository_url=index.docker.io%2Fgoharbor%2Fharbor-jobservice
      - pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
      ref: pkg:k8s/[email protected]
    - dependsOn:
      - pkg:oci/hardened-kubernetes@sha256%3A4fc10f59baf2c2fc2b8b80a33beec125050d0f749e82130de3fa483e43a90279?repository_url=index.docker.io%2Francher%2Fhardened-kubernetes
      ref: pkg:k8s/k8s.io%2Fcontroller-manager
    - dependsOn:
      - pkg:oci/hardened-kubernetes@sha256%3A4fc10f59baf2c2fc2b8b80a33beec125050d0f749e82130de3fa483e43a90279?repository_url=index.docker.io%2Francher%2Fhardened-kubernetes
      ref: pkg:k8s/k8s.io%2Fkube-proxy
    - dependsOn:
      - pkg:oci/hardened-kubernetes@sha256%3A4fc10f59baf2c2fc2b8b80a33beec125050d0f749e82130de3fa483e43a90279?repository_url=index.docker.io%2Francher%2Fhardened-kubernetes
      ref: pkg:k8s/k8s.io%2Fkube-scheduler
    - dependsOn:
      - pkg:oci/hardened-coredns@sha256%3A99513a1cabd6fe947a3df0eb03f3d22ef8fbfba91e555d78959eefd20201de65?repository_url=index.docker.io%2Francher%2Fhardened-coredns
      ref: pkg:k8s/kube-dns
    - dependsOn:
      - pkg:oci/cinder-csi-plugin@sha256%3Acc9eb1d19550167e688a2bffe64971f2a378ee2973aab6b7f8c04de381af4321?repository_url=registry.k8s.io%2Fprovider-os%2Fcinder-csi-plugin
      - pkg:oci/csi-node-driver-registrar@sha256%3Aa13bff2ed69af0cf4270f0cf47bdedf75a56c095cd95b91195ae6c713a9b1845?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-node-driver-registrar
      - pkg:oci/livenessprobe@sha256%3A2b10b24dafdc3ba94a03fc94d9df9941ca9d6a9207b927f5dfd21d59fbe05ba0?repository_url=registry.k8s.io%2Fsig-storage%2Flivenessprobe
      ref: pkg:k8s/nodeplugin
    - dependsOn:
      - pkg:oci/harbor-portal@sha256%3Aac1382afbbce74e196bec839ac1b10caf95664f9c831e83dbd240859ca3db0df?repository_url=index.docker.io%2Fgoharbor%2Fharbor-portal
      - pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
      ref: pkg:k8s/[email protected]
    - dependsOn:
      - pkg:oci/harbor-registryctl@sha256%3A78c2ff95fa1fcd0160b0dda57e48c7dfc5c9d63f40568d677f7fa2ea56814412?repository_url=index.docker.io%2Fgoharbor%2Fharbor-registryctl
      - pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
      - pkg:oci/registry-photon@sha256%3A720af7db57976fd4f19a3d541812362c5199cc9c277595394754f566a7cdabf5?repository_url=index.docker.io%2Fgoharbor%2Fregistry-photon
      ref: pkg:k8s/[email protected]
    - dependsOn: []
      ref: pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
    - dependsOn:
      - 7634f1e4-b437-4eba-b6ca-6fa44010b7c6
      - 7bf9a850-35e3-465b-9fcf-d9d1e82428e0
      - 7e154c2c-3729-4bd0-81fa-f717ac69a1b7
      - 9863ac22-dbd1-410b-93ac-18012afdba33
      - a656d61a-4b8e-4967-b4c6-5bf9f4dcf66d
      - a80eba71-713a-4f0f-8304-7ffdae8a9ef0
      - e6eb9733-b49a-4890-a328-666e5adfdfd7
      - ea2a271e-cf2d-4cea-9a3c-c2ef0e7305b9
      - f72e1008-b875-4546-9642-a10435a846c0
      - pkg:k8s/[email protected]
      - pkg:k8s/[email protected]
      - pkg:k8s/[email protected]
      - pkg:k8s/[email protected]
      - pkg:k8s/cloud-controller-manager
      - pkg:k8s/controllerplugin
      - pkg:k8s/[email protected]
      - pkg:k8s/go.etcd.io%2Fetcd%[email protected]
      - pkg:k8s/hubble-relay
      - pkg:k8s/hubble-ui
      - pkg:k8s/istio-cni-node
      - pkg:k8s/istio-cni-node
      - pkg:k8s/istio-cni-node
      - pkg:k8s/[email protected]
      - pkg:k8s/k8s.io%2Fcontroller-manager
      - pkg:k8s/k8s.io%2Fcontroller-manager
      - pkg:k8s/k8s.io%2Fkube-proxy
      - pkg:k8s/k8s.io%2Fkube-proxy
      - pkg:k8s/k8s.io%2Fkube-scheduler
      - pkg:k8s/kube-dns
      - pkg:k8s/nodeplugin
      - pkg:k8s/[email protected]
      - pkg:k8s/[email protected]
      - pkg:k8s/[email protected]
      ref: pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
    - dependsOn: []
      ref: pkg:oci/cinder-csi-plugin@sha256%3Acc9eb1d19550167e688a2bffe64971f2a378ee2973aab6b7f8c04de381af4321?repository_url=registry.k8s.io%2Fprovider-os%2Fcinder-csi-plugin
    - dependsOn: []
      ref: pkg:oci/csi-attacher@sha256%3A34cf9b32736c6624fc9787fb149ea6e0fbeb45415707ac2f6440ac960f1116e6?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-attacher
    - dependsOn: []
      ref: pkg:oci/csi-node-driver-registrar@sha256%3Aa13bff2ed69af0cf4270f0cf47bdedf75a56c095cd95b91195ae6c713a9b1845?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-node-driver-registrar
    - dependsOn: []
      ref: pkg:oci/csi-provisioner@sha256%3A893e37a388e7a7463d6c3523311b28cfbc5ae536dbef35430eed272cdc6850dc?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-provisioner
    - dependsOn: []
      ref: pkg:oci/csi-resizer@sha256%3A2e2b44393539d744a55b9370b346e8ebd95a77573064f3f9a8caf18c22f4d0d0?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-resizer
    - dependsOn: []
      ref: pkg:oci/csi-snapshotter@sha256%3A03693292701b95d177b45c9e4d752025e6214de3ef8695e30d0001f36ec8f5e6?repository_url=registry.k8s.io%2Fsig-storage%2Fcsi-snapshotter
    - dependsOn: []
      ref: pkg:oci/harbor-exporter@sha256%3A25547cc618c6828c982f246201e1c172604cccc8985ce6671171ff3b0a1a2a83?repository_url=index.docker.io%2Fgoharbor%2Fharbor-exporter
    - dependsOn: []
      ref: pkg:oci/harbor-jobservice@sha256%3Abc65169ad4137d892ec481c930bdd1f07326cafc7b9367bee9ebddb2b08a7d42?repository_url=index.docker.io%2Fgoharbor%2Fharbor-jobservice
    - dependsOn: []
      ref: pkg:oci/harbor-portal@sha256%3Aac1382afbbce74e196bec839ac1b10caf95664f9c831e83dbd240859ca3db0df?repository_url=index.docker.io%2Fgoharbor%2Fharbor-portal
    - dependsOn: []
      ref: pkg:oci/harbor-registryctl@sha256%3A78c2ff95fa1fcd0160b0dda57e48c7dfc5c9d63f40568d677f7fa2ea56814412?repository_url=index.docker.io%2Fgoharbor%2Fharbor-registryctl
    - dependsOn: []
      ref: pkg:oci/hardened-coredns@sha256%3A99513a1cabd6fe947a3df0eb03f3d22ef8fbfba91e555d78959eefd20201de65?repository_url=index.docker.io%2Francher%2Fhardened-coredns
    - dependsOn: []
      ref: pkg:oci/hardened-etcd@sha256%3Ac6b7a4f2f79b24f9310e769ce7c1e0caba47fbf2d03a2025b19bee2090dae94d?repository_url=index.docker.io%2Francher%2Fhardened-etcd
    - dependsOn: []
      ref: pkg:oci/hardened-kubernetes@sha256%3A4fc10f59baf2c2fc2b8b80a33beec125050d0f749e82130de3fa483e43a90279?repository_url=index.docker.io%2Francher%2Fhardened-kubernetes
    - dependsOn: []
      ref: pkg:oci/install-cni@sha256%3Afc658db24db645a3b921881bcb57a8e2b050fdecb0471828e9b667dd42870bd4?repository_url=index.docker.io%2Fistio%2Finstall-cni
    - dependsOn: []
      ref: pkg:oci/livenessprobe@sha256%3A2b10b24dafdc3ba94a03fc94d9df9941ca9d6a9207b927f5dfd21d59fbe05ba0?repository_url=registry.k8s.io%2Fsig-storage%2Flivenessprobe
    - dependsOn: []
      ref: pkg:oci/mirrored-cilium-cilium@sha256%3A59f2a336d264ddeb3727dcdb4ba300d6838cf9a5484b55f321ef11611444b4fb?repository_url=index.docker.io%2Francher%2Fmirrored-cilium-cilium
    - dependsOn: []
      ref: pkg:oci/proxyv2@sha256%3A5786e72bf56c4cdf58e88dad39579a24875d05e213aa9a7bba3c59206f84ab6c?repository_url=index.docker.io%2Fistio%2Fproxyv2
    - dependsOn: []
      ref: pkg:oci/registry-photon@sha256%3A720af7db57976fd4f19a3d541812362c5199cc9c277595394754f566a7cdabf5?repository_url=index.docker.io%2Fgoharbor%2Fregistry-photon
    - dependsOn: []
      ref: pkg:oci/rke2-cloud-provider@sha256%3A00bad7e3c2263e3ef9e6231031a05929d9e2a56c6b87c89ad8cae6cc8ef8befe?repository_url=index.docker.io%2Francher%2Frke2-cloud-provider
    - dependsOn: []
      ref: pkg:oci/sha256@sha256%3A1f86f3400827a0451e6332262467f894eeb7caf0eb8779bd951e2caa9d027cbe?repository_url=index.docker.io%2Flibrary%2Fsha256
    - dependsOn: []
      ref: pkg:oci/sha256@sha256%3A9e5f81ee747866480ea1ac4630eb6975ff9227f9782b7c93919c081c33f38267?repository_url=index.docker.io%2Flibrary%2Fsha256
    - dependsOn: []
      ref: pkg:oci/sha256@sha256%3Adbef89f924a927043d02b40c18e417c1ea0e8f58b44523b80fef7e3652db24d4?repository_url=index.docker.io%2Flibrary%2Fsha256
    metadata:
      component:
        bom-ref: pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
        name: k8s.io/kubernetes
        properties:
        - name: aquasecurity:trivy:resource:Name
          value: k8s.io/kubernetes
        - name: aquasecurity:trivy:resource:Type
          value: cluster
        purl: pkg:k8s/rke/k8s.io%[email protected]%2Brke2r1
        supplier: {}
        type: platform
        version: 1.28.5+rke2r1
      timestamp: "2024-01-12T07:22:34+00:00"
      tools:
      - name: trivy
        vendor: aquasecurity
        version: 0.48.1
    serialNumber: urn:uuid:da6c39a2-9e4b-4a71-8a32-570224a78390
    specVersion: "1.5"
    version: 1
  registry:
    server: k8s.io
  scanner:
    name: Trivy
    vendor: Aqua Security
    version: 0.48.1
  summary:
    componentsCount: 68
    dependenciesCount: 68
  updateTimestamp: "2024-01-12T07:22:34Z"

so it seems it's because found k8s platfom is 1.28.5+rke2r1:

report:
  artifact:
    repository: kubernetes
    tag: 1.28.5+rke2r1

Is there a way to change that with configuration?

[chen-keinan]

@sylvainOL Thanks for the input , I'm converting this discussion to issue and will investigate it

[chen-keinan]

Closing issue #1767 opened