Automatic tool updates for build servers

Unattended updates for osv-scanner, Trivy, Go and other tools on build servers, with version policies, schedules and email notices.

Track
CI/CD
Status
In use
Period
2025-03 – present
AI
Developed with AI agents

My scope

Developer. Started in Mar 2025 with Claude chat (not stable enough); rebuilt with Claude Code from Jul 2025 as a single binary and systemd service.

Approach

  • Config lists each tool and its GitHub source, with latest, stable or pinned modes.

Verification

Runs routinely on internal CI/CD servers.

Results

MetricValueSourceEvidence
My commits100Git historySystem record
Related hours131.5 hTimesheetsSystem record
Logged hours split: me / AI executionme ≈95 h, AI execution ≈37 h (hours before 2025-02-22 count as mine)Own estimate; hours since 2025-02-22 split by the period’s ratio; company-logged hours onlyOwn estimate

Limits and next steps

The PM-facing UI is not built yet.

Tools

  • Python
  • systemd
  • Claude Code