Node collector image has a lot of CVEs and outdated

[nabokihms]

Is node collector still maintained? We run this on all nodes through the trivy-operator, and for many companies, this is a serious security concern, as it involves running anything that has CVEs.

[afdesk]

Thank you for your interest in trivy-operator.

Yes — the node collector is still maintained. That said, we haven’t encountered any significant operational issues with it recently, which is why we haven’t introduced any major changes of late.

We absolutely understand your concern regarding a potential CVE in the node collector, and we will prioritise addressing it in the coming updates.

[nabokihms]

Thanks for the answer, hope there will be a new release since 2024.