- name: Install Lynis
  ansible.builtin.git: 
    repo: https://github.com/CISOfy/lynis
    dest: /usr/local/lynis
    clone: yes
    force: yes

- name: Run Lynis
  ansible.builtin.shell: lynis audit system
  args:
    chdir: /usr/local/lynis/