Trivy operator different scan result for image then latest trivy scan

[patel-aum]

i am facing an issue that my trivy-operator in cluster is showing more vulnerabilities then trivy tool
version for trivy-operator is app: 0.18.5 , Chart: 0.20.6
version for trivy is Version: 0.49.1

both are latest only and still there is a discrepancy in vulnerabilities by 35

[chen-keinan]

@patel-aum can you add details on how you are running (command) the cli tool and configuration of trivy-operator ?

[chen-keinan]

trivy-operator by default do not run with --ignore-unfixed flag , you'll have to set it, I assume afterwards you'll get the same results

[patel-aum]

Yes it's set in operator also

[chen-keinan]

can you share trivy-operator configmaps ? and deployment EnvVar ?

[patel-aum]

trivy operator trivy-values.yaml:

serviceMonitor:
enabled: true
trivy:
ignoreUnfixed: true

[chen-keinan]

can you share the actual config files and remove any sensitive information?