diff --git a/defaults/main.yml b/defaults/main.yml index 7133ab5..7a0eb00 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -1,4 +1,5 @@ ecomscan_binary_source: https://ecomscan.com/downloads/linux-amd64/ecomscan +ecomscan_binary_directory: ~/bin ecomscan_binary_path: ~/bin/ecomscan ecomscan_key: trial ecomscan_report_email: root@localhost.local diff --git a/tasks/main.yml b/tasks/main.yml index d442cc0..1a250e4 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -1,9 +1,15 @@ --- +- name: Ensure users bin directory exists + ansible.builtin.file: + path: "{{ ecomscan_binary_directory }}" + state: directory + mode: '0755' + - name: Download the Ecomscan binary ansible.builtin.get_url: url: "{{ ecomscan_binary_source }}" dest: "{{ ecomscan_binary_path }}" - mode: '0644' + mode: '0744' - name: Perform Ecomscan ansible.builtin.command: @@ -21,3 +27,9 @@ - name: Summary ansible.builtin.debug: msg: "{{ scan.stdout_lines | select('match', '^>> Found:.*') | first }}" + +- name: Assert No Malware + ansible.builtin.assert: + that: "'MALWARE' not in scan.stdout" + fail_msg: "❌ Malware found" + success_msg: "✅ No Malware Found"