- name: Install chkrootkit and debsecan
  become: true
  apt:
    cache_valid_time: 3600
    install_recommends: no
    name: ['chkrootkit', 'debsecan']
    state: latest
    update_cache: yes