playbooks/roles/debian/security/tasks/main.yml

   1 - name: Install chkrootkit and debsecan
   2   become: true
   3   apt:
   4     cache_valid_time: 3600
   5     install_recommends: no
   6     name: ['chkrootkit', 'debsecan']
   7     state: latest
   8     update_cache: yes