Change Fedora Silverblue automatic updates to check
Set the AutomaticUpdatePolicy to check in /etc/rpm-ostreed.conf:
[Daemon]
AutomaticUpdatePolicy=check
Then reload the service:
sudo rpm-ostree reload
Enable the timer if not already active:
sudo systemctl enable rpm-ostreed-automatic.timer --now
This configures the system to check for updates automatically and display them in rpm-ostree status, but does not download or apply them. You’ll see notifications about available updates, including CVEs, without any automatic downloading.