Related: OpenBSD does this daily as part of running security(8) and its coverage can be expanded to include pretty much anything.
https://man.openbsd.org/security