# securityupdates

Source: https://www.pingtower.com/docs/addons/securityupdates/

Count pending package updates on a Debian host, and whether it wants a reboot. Reads only; never installs anything.

<span class="pill priv">privileged</span> Add `securityupdates` to `agent.enable_addons`. Debian and apt only.

## Parameters

| Parameter | Default | Meaning |
| --- | --- | --- |
| `metadata_max_age` | `48h` | Package lists older than this report `measurement_health=stale`. |

The addon never runs `apt update` or installs anything. If package metadata is missing or unreadable it reports `measurement_health=unavailable` with the counts omitted rather than a zero that looks like good news.

## Measurements

`updates_available`, `security_updates_available`, `metadata_age_s`, `reboot_required`, `held_packages`, `phased_updates`, `deferred_updates`.

## A rule for it

```json
{"name":"security-updates-pending","match":{"tags":["addon:securityupdates"]},
 "conditions":[{"key":"security_updates_available","op":"gte","value":1}],
 "identifier_keys":["agent"],"renotify_minutes":1440}
```