# Weekly security advisories that affect your software

Every Monday at 06:00 UTC, reads a security advisory feed, looks up each advisory from the past week in a knowledge base holding your software inventory, and posts only the ones that appear to match something you run to a webhook you choose. Posts nothing in a week with no matches. Matching is done by AI against your inventory documents, so treat it as a first pass, not a complete scan.

**Use cases:** Security, Monitoring and alerts

**Tags:** CVE, vulnerability, security advisory, patch, software inventory, SBOM, schedule, webhook

[Create this agent](https://seclai.com/agent-examples/create/security_advisory_watch)

## How it starts

Trigger: template input.
Runs on a schedule.

## What it needs

- **Software inventory source** — Upload your software inventory here: lists of products, libraries and versions you run, an SBOM, or asset lists.
- **Software inventory knowledge base** — The knowledge base each advisory is checked against.

## Steps

- Read the advisory feed
- List this week's advisories
- Parse the advisory list
- For each advisory
  - For each item: Look it up in the inventory
  - Does it affect us?
  - Keep the result
- Keep only the matches
- Anything that affects us?
  - If yes: Post the matching advisories