Documentation

← All agent examples

Weekly security advisories that affect your software

Every Monday at 06:00 UTC, reads a security advisory feed, looks up each advisory from the past week in a knowledge base holding your software inventory, and posts only the ones that appear to match something you run to a webhook you choose. Posts nothing in a week with no matches. Matching is done by AI against your inventory documents, so treat it as a first pass, not a complete scan.

Security
Monitoring and alerts
CVE
vulnerability
security advisory
patch
software inventory
SBOM
schedule
webhook

How it starts

On a schedule.

  • Weekly on Monday at 06:00

What it needs

  • Software inventory source — Upload your software inventory here: lists of products, libraries and versions you run, an SBOM, or asset lists.
  • Software inventory knowledge base — The knowledge base each advisory is checked against.

Steps

Read the advisory feed

Web Fetch

List this week's advisories

Prompt Call

Parse the advisory list

Extract Content

For each advisory

For Each

For each item:

Look it up in the inventory

Retrieval

Does it affect us?

Prompt Call

Keep the result

Item Value

Keep only the matches

Prompt Call

Anything that affects us?

If / Else

If yes:

Post the matching advisories

Webhook Call