Automated watch of vulnerabilities affecting my infrastructure

# Introduction Keeping an eye on published vulnerabilities is part of my work, but there are now too many CVE published every day to read them all, and the delay between the publication of a vulnerability and its first exploitation also became very short. In my opinion, this work cannot reasonably be done by hand anymore. My infrastructure is already updated automatically for nearly all its components, so most of the time a fix arrives without me doing anything. But sometimes, I need to react faster than the update, for example to set up a workaround while waiting for a patched version. For this, I need to know quickly when a vulnerability affecting me is published. In this blog post, I share the small setup I made to receive alerts about vulnerabilities that affect my infra, with issues tracking and maybe a fix created as a PR automatically when possible. There is nothing exceptional here, but it may give ideas to some readers. # How it works My infrastructure is described entirely…