[Unit]
Description=Discover upstream app releases and advisories for operator review

[Service]
Type=oneshot
EnvironmentFile=%h/.config/archipelago/upstream-discovery.env
ExecStart=/usr/bin/python3 ${ARCHY_UPSTREAM_WATCHER} --state %h/.local/state/archipelago/upstream-discovery.json
UMask=0077
NoNewPrivileges=yes