lftools jenkins -s 'build.opnfv.org/ci' plugins sec

now lists any vulnerable plugins:

example:
$ lftools jenkins -s 'build.opnfv.org/ci' plugins sec
Jenkins Updates shows a vulnerability in pam-auth 1.5 https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1316
We are Running pam-auth 1.5
Jenkins Updates shows a vulnerability in credentials 2.1.18 https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1322
We are Running credentials 2.1.18

Next is too have the job run daily on the internal jenkins server and email the relevant RE's