mkhanal1 / cloud_agent_ansible Goto Github PK

If the cloud agent package is signed with a private key by Qualys the package should be validated. I cna't find this in your tasks.

If the packages are not signed I think that's rather unusual for security related software.

Regards,
Reiner

this task Check if Qualys Cloud Agent is Installed Already is registering whether QCA was installed, however, it is not being used in any subsequent tasks. when condition should be something like:
when: (ansible_distribution == 'Debian') and ('"Unit qualys-cloud-agent.service could not be found" in init_status_result.stderr')