General tasks

Guidance on files, communication, privileges and package management in Ansible tasks.

Documentation

Article	Path
Ansible file creation with potentially unsafe permissions	`ansible/general/risky_file_permissions`
HTTP communication in an Ansible task	`ansible/general/communication_over_http`
Check the intended execution of Ansible become settings	`ansible/general/privilege_escalation_using_become_plugin`
Unpinned package versions	`ansible/general/unpinned_package_version`
Sensitive information exposed in Ansible logs	`ansible/general/logging_of_sensitive_data`
Review Ansible file path resolution	`ansible/general/insecure_relative_path_resolution`

Set permissions for the file’s purpose and verify ownership and effective permissions.

Move Ansible HTTP requests to HTTPS where supported.

Make the target user and the scope of user switching explicit.

Validate production package updates and specify the required versions and dependency scope.

Protect task output from sensitive inputs and results, and review existing logs for exposure.

Verify Ansible’s file-search context so the intended templates and files are deployed consistently.