2025-12-23 19:17:16 +08:00

15 lines
399 B
YAML

---
- name: Update APT Cache
apt:
update_cache: yes
ignore_errors: yes
- name: Fetch packages due for security updates
shell: apt list --upgradable 2>/dev/null
register: security_updates
- name: Ensure no security updates are pending
debug: var=security_updates
failed_when: "'-security' in security_updates.stdout"
when: validate_pending_security_updates | default(true) | bool