---
- hosts: prod
  serial: 20
  sudo: true
  max_fail_percentage: 0
  pre_tasks:
    - name: aptitude update
      shell: "aptitude update"
    - name: check for security updates
      shell: "/usr/lib/update-notifier/apt-check 2>&1 | cut -d ';' -f 2"
      register: security_update_result
    - debug: var=security_update_result
- include: updates.yml
  when: security_update_result.stdout > "0"