Security / Public reference

Ansible task runs as root

An Ansible play or task that sets become: true or become: yes outside a comment.

What you need to supply

The playbook text. Ansible facts are not executed.

If it reports a finding

High severity. The suggested next step is to set become to false unless the task has a reviewed need to run as root.

What this does not prove

A play with become: false and no public CIDR is not this finding. become: true in a comment is not a finding.

Task that this check is written to notice

- hosts: all
  tasks:
    - name: install
      become: true

All review checks. Reading this page does not submit your infrastructure.