Suse extended support best practise

As we have to think about patching and reporting suse sles server in long term support I would like to ask about how to handle this.
The “suse sles 11/12 native tools” site doesn’t offer patches from LTS, so a custom repo seems to be the best way?
If yes, any ideas how to create a patch report to show missing patches?