Automatic updates for Patch Category Security + Skipping Interactive Patches

SUSE Manager
1

Hello,
Currently I have configured CL to deliver the following strategy:
• For any release there’s a 3-tier environment: Dev, Test, Prod
• The release cycle is time based, means
o Dev = current quarter
o Test = Dev - 1 quarter
o Prod = Dev - 2 quarters
Hereby a ensure that any package in Prod is 6 month older compared to Dev and 3 month older compared to Test.

However, I want any security patch to be applied weekly.
Before setting up SUSE Manager I used the function “Automatic Online Update" to run automatic updates for Patch Category Security + Skipping Interactive Patches on a regular basis.

This decentralized approach would work with systems connected to SUSE Manager only if there’s another repo that is not build from the 3-tier environment CL.

Is there a function in SUSE Manager that allows me to manage this centrally?
If not, how can I provide a repository that includes security patches only?

THX