lint fixes

roles/rocky9/tasks/security_setup.yml

@@ -9,7 +9,7 @@
   ansible.posix.selinux:
     state: disabled
 
-#- name: Explicitly specifying positional matched groups in replacement
+# - name: Explicitly specifying positional matched groups in replacement
 #  ansible.builtin.replace:
 #    path: /etc/ssh/sshd_config
 #    regexp: ^(ListenAddress[ ]+)[^\n]+$

roles/root-cert/tasks/red_hat.yml

@@ -1,21 +1,27 @@
 ---
 - name: Make sure the folder exists (Red Hat)
-  file:
+  ansible.builtin.file:
     path: /etc/pki/ca-trust/source/anchors
     state: directory
+    owner: root
+    group: root
+    mode: "0755"
 
 - name: Copy PEM into folder (Red Hat)
-  copy:
+  ansible.builtin.copy:
     src: "{{ install_root_cert_pem }}"
     dest: "/etc/pki/ca-trust/source/anchors/{{ install_root_cert_pem | basename }}"
+    owner: root
+    group: root
+    mode: "0644"
   register: result
 
 - name: Update CA Trust (Red Hat)
-  command: update-ca-trust
+  ansible.builtin.command: update-ca-trust
   when: result is changed
 
 - name: Update CA Trust (Red Hat < 7)
-  command: update-ca-trust enable
+  ansible.builtin.command: update-ca-trust enable
   when:
     - result is changed
     - ansible_distribution_version|int < 7