$ kind delete cluster && kind create cluster --image kindest/node:v1.27.1
$ kubectl wait --for=condition=Ready --all nodes
$ trivy k8s --report summary --scanners vuln --skip-images

Summary Report for kind-kind

Workload Assessment
┌───────────┬───────────────────────────┬───────────────────┐
│ Namespace │         Resource          │  Vulnerabilities  │
│           │                           ├───┬───┬───┬───┬───┤
│           │                           │ C │ H │ M │ L │ U │
├───────────┼───────────────────────────┼───┼───┼───┼───┼───┤
│           │ Cluster/k8s.io/kubernetes │   │   │ 1 │   │   │
└───────────┴───────────────────────────┴───┴───┴───┴───┴───┘
Severities: C=CRITICAL H=HIGH M=MEDIUM L=LOW U=UNKNOWN


Infra Assessment
┌───────────┬─────────────────────────┬───────────────────┐
│ Namespace │        Resource         │  Vulnerabilities  │
│           │                         ├───┬───┬───┬───┬───┤
│           │                         │ C │ H │ M │ L │ U │
├───────────┼─────────────────────────┼───┼───┼───┼───┼───┤
│           │ Node/kind-control-plane │   │ 4 │ 4 │ 1 │   │
└───────────┴─────────────────────────┴───┴───┴───┴───┴───┘
Severities: C=CRITICAL H=HIGH M=MEDIUM L=LOW U=UNKNOWN

Summary Report for kind-kind

Workload Assessment
┌───────────┬───────────────────────────┬───────────────────┐
│ Namespace │         Resource          │  Vulnerabilities  │
│           │                           ├───┬───┬───┬───┬───┤
│           │                           │ C │ H │ M │ L │ U │
├───────────┼───────────────────────────┼───┼───┼───┼───┼───┤
│           │ Cluster/k8s.io/kubernetes │   │   │ 1 │   │   │
└───────────┴───────────────────────────┴───┴───┴───┴───┴───┘
Severities: C=CRITICAL H=HIGH M=MEDIUM L=LOW U=UNKNOWN


Infra Assessment
┌─────────────┬─────────────────────────────────────────┬───────────────────┐
│  Namespace  │                Resource                 │  Vulnerabilities  │
│             │                                         ├───┬───┬───┬───┬───┤
│             │                                         │ C │ H │ M │ L │ U │
├─────────────┼─────────────────────────────────────────┼───┼───┼───┼───┼───┤
│ kube-system │ ControlPlaneComponents/k8s.io/apiserver │   │   │ 2 │ 2 │   │
│             │ Node/kind-control-plane                 │   │ 4 │ 4 │ 1 │   │
└─────────────┴─────────────────────────────────────────┴───┴───┴───┴───┴───┘
Severities: C=CRITICAL H=HIGH M=MEDIUM L=LOW U=UNKNOWN

$ minikube start
$  trivy k8s --format cyclonedx --disable-node-collector | jq '.components[] | select(.name == "go.etcd.io/etcd/v3")'

2025-04-04T16:15:21+06:00       INFO    "--format cyclonedx" disables security scanning. Specify "--scanners vuln" explicitly if you want to include vulnerabilities in the "cyclonedx" report.
2025-04-04T16:15:22+06:00       INFO    Scanning K8s... K8s="minikube"
{
  "bom-ref": "pkg:k8s/go.etcd.io%2Fetcd%2Fv3",
  "type": "application",
  "name": "go.etcd.io/etcd/v3",
  "purl": "pkg:k8s/go.etcd.io%2Fetcd%2Fv3",
  "properties": [
    {
      "name": "aquasecurity:trivy:resource:Name",
      "value": "etcd-minikube"
    },
    {
      "name": "aquasecurity:trivy:resource:Type",
      "value": "controlPlane"
    }
  ]
}

2025-04-04T16:15:09+06:00       INFO    "--format cyclonedx" disables security scanning. Specify "--scanners vuln" explicitly if you want to include vulnerabilities in the "cyclonedx" report.
2025-04-04T16:15:09+06:00       INFO    Scanning K8s... K8s="minikube"
{
  "bom-ref": "pkg:k8s/go.etcd.io%2Fetcd%2Fv3@v3.5.15-0",
  "type": "application",
  "name": "go.etcd.io/etcd/v3",
  "version": "v3.5.15-0",
  "purl": "pkg:k8s/go.etcd.io%2Fetcd%2Fv3@v3.5.15-0",
  "properties": [
    {
      "name": "aquasecurity:trivy:resource:Name",
      "value": "etcd-minikube"
    },
    {
      "name": "aquasecurity:trivy:resource:Type",
      "value": "controlPlane"
    }
  ]
}