Pingtower
Docs
securityupdates
Count pending package updates on a Debian host, and whether it wants a reboot. Reads only; never installs anything.
privileged Add securityupdates to agent.enable_addons. Debian and apt only.
Parameters
| Parameter | Default | Meaning |
|---|---|---|
metadata_max_age | 48h | Package lists older than this report measurement_health=stale. |
The addon never runs apt update or installs anything. If package metadata is missing or unreadable it reports measurement_health=unavailable with the counts omitted rather than a zero that looks like good news.
Measurements
updates_available, security_updates_available, metadata_age_s, reboot_required, held_packages, phased_updates, deferred_updates.
A rule for it
{"name":"security-updates-pending","match":{"tags":["addon:securityupdates"]},
"conditions":[{"key":"security_updates_available","op":"gte","value":1}],
"identifier_keys":["agent"],"renotify_minutes":1440}