Sorting security only updates in pkcon

Currently, I update my system daily with dnf offline-upgrade --security. It is a kind of hassle.

If it’s possible to use pkcon to sort only security update. Then I could use it with a systemd service to automatically do security patches with Offline updates.

Is it possible to sort so ?
I haven’t seen anything regarding it in pkcon --help

What distribution are you using - guessing Fedora based on dnf? If so, please consider the perspective provided by Gordon Messmer (a Fedora maintainer) about using the --security flag here:

https://www.reddit.com/r/Fedora/comments/10h6wsr/counterpoint_dnf_update_security_has_significant/

I don’t know that this is something KDE Discover (the tag for this post) would be handling anyway, as it relies on upstream projects like PackageKit to handle actually fetching and executing update info.

Well, I don’t want to update everything every hour and restart my system. Hence, why, I prioritize security updates at first and others on weekend.

The reason for using pkcon is I can’t create a proper trigger file for offline-upgrade at will, but it seems to be possible on pkcon which is why I am trying to sort out security only updates.

In general, perhaps you could somehow get the list of packages you want to install from dnf and then pipe that into a list for pkcon, since it looks like pkcon would accept a list of specific packages? That’s beyond my text-parsing knowledge but could be a way to investigate.

Still, I need to filter out CVEs. With dnf update --security it’s in-place upgrade for packages not offline update.