Inconsistent behavior: trivy k8s scans Deployment but not Pod (private registry images)

[nitindiwakar2610]

Question

I have build a service that runs trivy k8s scans against client clusters.The service only receives OpenShift (oc) creds from the client. Using those, it generates a kubeconfig and authenticates to the cluster.
When running trivy k8s inside this service:
Scanning a Deployment that uses a private registry images works fine.
Scanning the corresponding Pod from that Deployment fails with an image resolution/authentication error.

Target

Kubernetes

Scanner

Vulnerability

Output Format

JSON

Mode

Standalone

Operating System

No response

Version

v0.66.0