Debug looks terrible. Put it in a file and hope that the color codes are ignored.

facts/filesystem_names.yml

@@ -0,0 +1,24 @@
+---
+# Define what the file and folder names should be on each OS.
+
+- name: Set Pop!_OS Package Names
+  ansible.builtin.set_fact:
+    lynis_install_dir: /usr/local/lynis
+    lynis_report: /home/ling/lynis.log
+  when: ansible_distribution == "Pop!_OS"
+
+
+# TODO Needs tested
+- name: Set Ubuntu Package Names
+  ansible.builtin.set_fact:
+    lynis_install_dir: /usr/local/lynis
+    lynis_report: /root/lynis.log
+  when: ansible_distribution == "Ubuntu"
+
+
+# TODO Needs tested
+- name: Set FreeBSD Package Names
+  ansible.builtin.set_fact:
+    lynis_install_dir: /usr/local/lynis
+    lynis_report: /root/lynis.log
+  when: ansible_distribution == "FreeBSD"

facts/package_names.yml

@@ -1,5 +1,5 @@
 ---
-# Define what the program name is on each OS so we can use package builtin. like this:
+# Define what the program name is on each OS so we can use package builtin.
 
 - name: Set Pop!_OS Package Names
   ansible.builtin.set_fact:

facts/service_names.yml

@@ -1,10 +1,11 @@
 ---
-# Define what the program name is on each OS so we can use package builtin. like this:
+# Define what the program name is on each OS so we can use service builtin.
 
 - name: Set Pop!_OS Service Names
   ansible.builtin.set_fact:
     cups: cups
     cups_pattern: cupsd
+
     cups_browse: cups-browsed
     cups_browse_pattern: cups-browsed
   when: ansible_distribution == "Pop!_OS"
@@ -15,6 +16,7 @@
   ansible.builtin.set_fact:
     cups: cups
     cups_pattern: cupsd
+
     cups_browse: cups-browsed
     cups_browse_pattern: cups-browsed
   when: ansible_distribution == "Ubuntu"
@@ -25,6 +27,7 @@
   ansible.builtin.set_fact:
     cups: cups
     cups_pattern: cupsd
+    
     cups_browse: cups-browsed
     cups_browse_pattern: cups-browsed
   when: ansible_distribution == "FreeBSD"

local.yml

@@ -6,6 +6,7 @@
   become: true  
 
   pre_tasks:
+    - include: facts/filesystem_names.yml
     - include: facts/package_names.yml
     - include: facts/service_names.yml
 

tasks/hardness_check_lynis.yml

@@ -1,14 +1,12 @@
 - name: Install Lynis
   ansible.builtin.git: 
     repo: https://github.com/CISOfy/lynis
-    dest: /usr/local/lynis
+    dest: "{{ lynis_install_dir }}"
     clone: yes
     force: yes
 
-- name: Run Lynis
+- name: Run Lynis Audit System
-  command: /usr/local/lynis/lynis audit system
+  command: /usr/local/lynis/lynis audit system > "{{ lynis_report }}"
-  register: lynis_report
 
-- name: Lynis Report
+- name: Make Lynis Report Readable
-  debug:
+  command: chmod 444 "{{ lynis_report }}"
-    var: lynis_report