# \#security **URL:** https://forum.ansible.com/tag/security/338.md [Latest](https://forum.ansible.com/latest.md) · [Categories](https://forum.ansible.com/categories.md) · [Tags](https://forum.ansible.com/tags.md) --- ## [How to register secrets - as plugin developers, and users?](https://forum.ansible.com/t/how-to-register-secrets-as-plugin-developers-and-users/46448)
**Author:** [@felixfontein](https://forum.ansible.com/u/felixfontein)\ **Replies:** 5\ **Last updated:** [October 13, 2026, 9:33am UTC](https://forum.ansible.com/t/how-to-register-secrets-as-plugin-developers-and-users/46448 "2026-10-13T09:33:33Z")
This is another discussion about the new Secret masking feature of ansible-core 2.22. I started working on some PRs in community.general to make lookup plugins that retrieve secrets automatically register sensitive value… --- ## [New Secret Masking Feature - 2.22](https://forum.ansible.com/t/new-secret-masking-feature-2-22/46291)
**Author:** [@jborean](https://forum.ansible.com/u/jborean)\ **Replies:** 17\ **Last updated:** [October 3, 2026, 8:14pm UTC](https://forum.ansible.com/t/new-secret-masking-feature-2-22/46291 "2026-10-03T20:14:26Z")
New Ansible 2.22 Feature - Secret Masking A new feature has just been merged in devel for ansible-core, a secret registration and masking system. The initial implementation is in ansible/ansible#87457 and the documentati… --- ## [What information should callback plugins mask?](https://forum.ansible.com/t/what-information-should-callback-plugins-mask/46388)
**Author:** [@felixfontein](https://forum.ansible.com/u/felixfontein)\ **Replies:** 1\ **Last updated:** [October 2, 2026, 3:57pm UTC](https://forum.ansible.com/t/what-information-should-callback-plugins-mask/46388 "2026-10-02T15:57:20Z")
This is related to the new Secret masking feature of ansible-core 2.22. I’ve been looking into adjusting the collections I maintain to this in the last weeks, and there are two categories where I think a lot of questions… --- ## [Ansible playbook for hardening a Docker host](https://forum.ansible.com/t/ansible-playbook-for-hardening-a-docker-host/46123)
**Author:** [@jezmn](https://forum.ansible.com/u/jezmn)\ **Replies:** 4\ **Last updated:** [September 11, 2026, 5:35am UTC](https://forum.ansible.com/t/ansible-playbook-for-hardening-a-docker-host/46123 "2026-09-11T05:35:56Z")
Hi, I’ve been wanting to automate the server setup I usually do manually on fresh ubuntu server for a while now. Repetitive stuff like SSH hardening, Docker setup, firewall rules, fail2ban, etc. Figured it was time to j… --- ## [Pinning GHA actions/shared workflows to commits](https://forum.ansible.com/t/pinning-gha-actions-shared-workflows-to-commits/46118)
**Author:** [@felixfontein](https://forum.ansible.com/u/felixfontein)\ **Replies:** 5\ **Last updated:** [August 18, 2026, 9:10am UTC](https://forum.ansible.com/t/pinning-gha-actions-shared-workflows-to-commits/46118 "2026-08-18T09:10:05Z")
There’s currently a push to pin GHA actions and shared workflows to commit hashes (to thwart certain types of supply chain attacks). While doing that for several repos, I found several (potential) problems and solutions. … --- ## [Securing the Supply Chain Together: Security Concepts Every Ansible Contributor Should Know](https://forum.ansible.com/t/securing-the-supply-chain-together-security-concepts-every-ansible-contributor-should-know/46021)
**Author:** [@anwesha](https://forum.ansible.com/u/anwesha)\ **Replies:** 0\ **Last updated:** [July 6, 2026, 11:45am UTC](https://forum.ansible.com/t/securing-the-supply-chain-together-security-concepts-every-ansible-contributor-should-know/46021 "2026-07-06T11:45:13Z")
Securing the Supply Chain Together: Security Concepts Every Ansible Contributor Should Know Hello, Ansible Community! Welcome back to our ongoing series on the EU Cyber Resilience Act (CRA) and what it means for Ansible… --- ## [The Bullhorn #228](https://forum.ansible.com/t/the-bullhorn-228/45809)
**Author:** [@oranod](https://forum.ansible.com/u/oranod)\ **Replies:** 0\ **Last updated:** [May 18, 2026, 4:56pm UTC](https://forum.ansible.com/t/the-bullhorn-228/45809 "2026-05-18T16:56:53Z")
This week in Ansible Community Issue #228, 2026-05-18 (Past Issues) Welcome to The Bullhorn, our newsletter for the Ansible Community. If you have any questions or content you’d like to share, you’re welcome to ch… --- ## [Security as Default, Not an Afterthought: The CRA's Real Message](https://forum.ansible.com/t/security-as-default-not-an-afterthought-the-cras-real-message/45795)
**Author:** [@anwesha](https://forum.ansible.com/u/anwesha)\ **Replies:** 0\ **Last updated:** [May 13, 2026, 7:17pm UTC](https://forum.ansible.com/t/security-as-default-not-an-afterthought-the-cras-real-message/45795 "2026-05-13T19:17:27Z")
In a recent forum post, we introduced the overall concept of EU Cyber Resilience Act (CRA) and what it means for the Ansible community, the timeline, who is affected, and Red Hat’s role as an open-source software steward… --- ## [EU Cyber Resilience Act (CRA) and what it means for Ansible?](https://forum.ansible.com/t/eu-cyber-resilience-act-cra-and-what-it-means-for-ansible/45716)
**Author:** [@anwesha](https://forum.ansible.com/u/anwesha)\ **Replies:** 0\ **Last updated:** [April 21, 2026, 11:04am UTC](https://forum.ansible.com/t/eu-cyber-resilience-act-cra-and-what-it-means-for-ansible/45716 "2026-04-21T11:04:06Z")
Hello everyone, We are reaching out to share an important update regarding the evolving regulatory landscape in Europe and how it impacts the Ansible ecosystem. The European Union has introduced the Cyber Resilience Act… --- ## [Feature Request: Support OpenID Connect (OIDC) Trusted Publishing for Ansible Collections on Galaxy](https://forum.ansible.com/t/feature-request-support-openid-connect-oidc-trusted-publishing-for-ansible-collections-on-galaxy/45110)
**Author:** [@ChihweiLHBird](https://forum.ansible.com/u/ChihweiLHBird)\ **Replies:** 2\ **Last updated:** [January 15, 2026, 6:04am UTC](https://forum.ansible.com/t/feature-request-support-openid-connect-oidc-trusted-publishing-for-ansible-collections-on-galaxy/45110 "2026-01-15T06:04:49Z")
Supporting OpenID Connect (OIDC)-based trusted publishing would enable Ansible Collection developers to publish directly from GitHub workflows without storing long-lived API tokens or secrets. This tokenless approach wou… --- ## [\[Feedback\] Ansible Role ClamAV - additional protection on vm's](https://forum.ansible.com/t/feedback-ansible-role-clamav-additional-protection-on-vms/45032)
**Author:** [@mikolaj.jeziorny](https://forum.ansible.com/u/mikolaj.jeziorny)\ **Replies:** 0\ **Last updated:** [December 28, 2025, 9:29pm UTC](https://forum.ansible.com/t/feedback-ansible-role-clamav-additional-protection-on-vms/45032 "2025-12-28T21:29:07Z")
My new Ansible Role for install and configure CalmAV on the debian (and ubuntu). https://github.com/oxess/ansible-clamav The goal was create a role for simple implementation additional security for popular web applicat… --- ## [Setting security context constraint for awx operator](https://forum.ansible.com/t/setting-security-context-constraint-for-awx-operator/44372)
**Author:** [@jeremytourville](https://forum.ansible.com/u/jeremytourville)\ **Replies:** 0\ **Last updated:** [August 26, 2025, 2:53pm UTC](https://forum.ansible.com/t/setting-security-context-constraint-for-awx-operator/44372 "2025-08-26T14:53:35Z")
I have been running AWX Operator in my production kubernetes (k8s - non-OpenShift) cluster. I am using helm to deploy it. My helm chart is ver 2.11 and has been customized to pull from our private repo for images. I s… --- ## [Fine-grained command control needed on Ansible task execution](https://forum.ansible.com/t/fine-grained-command-control-needed-on-ansible-task-execution/43982)
**Author:** [@gunjanpb](https://forum.ansible.com/u/gunjanpb)\ **Replies:** 0\ **Last updated:** [July 22, 2025, 12:28pm UTC](https://forum.ansible.com/t/fine-grained-command-control-needed-on-ansible-task-execution/43982 "2025-07-22T12:28:57Z")
Hi all, I’m looking for a way to enforce restrictions on what operations Ansible is allowed to execute on target nodes, and prevent certain potentially dangerous or unauthorized operations ( shell commands or other Pyth… --- ## [Unable to Assign Team Permissions for Execution Environments — Option Not Listed](https://forum.ansible.com/t/unable-to-assign-team-permissions-for-execution-environments-option-not-listed/43668)
**Author:** [@SaravanaSelvaraj](https://forum.ansible.com/u/SaravanaSelvaraj)\ **Replies:** 2\ **Last updated:** [July 7, 2025, 8:11am UTC](https://forum.ansible.com/t/unable-to-assign-team-permissions-for-execution-environments-option-not-listed/43668 "2025-07-07T08:11:15Z")
Unable to Assign Team Permissions for Execution Environments — Option Not Listed. Dear community, We are currently using LDAP for managing user access and permissions in AWX. However, we’ve encountered what appear to b… --- ## [awx-operator only for installation and updates and remove it during operation?](https://forum.ansible.com/t/awx-operator-only-for-installation-and-updates-and-remove-it-during-operation/10975)
**Author:** [@cselback](https://forum.ansible.com/u/cselback)\ **Replies:** 0\ **Last updated:** [November 18, 2024, 10:32am UTC](https://forum.ansible.com/t/awx-operator-only-for-installation-and-updates-and-remove-it-during-operation/10975 "2024-11-18T10:32:28Z")
Hello everyone, After installing the awx-operator using Helm in Kubernetes, can I remove the “aww-operator-controller-manager” deployment or scale the associated pods to 0 without causing any issues to the remaining AWX… --- ## [Ansible - Strange Error - Executing Linux Playbooks - Command Not Allowed](https://forum.ansible.com/t/ansible-strange-error-executing-linux-playbooks-command-not-allowed/9689)
**Author:** [@don.salves](https://forum.ansible.com/u/don.salves)\ **Replies:** 5\ **Last updated:** [October 9, 2024, 4:54pm UTC](https://forum.ansible.com/t/ansible-strange-error-executing-linux-playbooks-command-not-allowed/9689 "2024-10-09T16:54:11Z")
Hi All - I have a simple playbook below which is executed in AWX to connect to Linux Machines. This playbook fails with a very strange issue when execution. I get “Command not allowed” error. \`\`\` - name: Unmount File … --- ## [Is there an official or defacto nftables module or collection?](https://forum.ansible.com/t/is-there-an-official-or-defacto-nftables-module-or-collection/7023)
**Author:** [@Ross-Murphy](https://forum.ansible.com/u/Ross-Murphy)\ **Replies:** 6\ **Last updated:** [September 28, 2024, 2:44pm UTC](https://forum.ansible.com/t/is-there-an-official-or-defacto-nftables-module-or-collection/7023 "2024-09-28T14:44:03Z")
Regarding nftables, I’m not seeing anything official ie. built-in or ansible.community collection for the use of nftables. I see there are a few collections out in the wild of limited or mixed popularity. Perhaps I’m no… --- ## [New Tenable Nessus Agent Collection](https://forum.ansible.com/t/new-tenable-nessus-agent-collection/7021)
**Author:** [@valkiriaaquatica](https://forum.ansible.com/u/valkiriaaquatica)\ **Replies:** 2\ **Last updated:** [July 4, 2024, 2:14pm UTC](https://forum.ansible.com/t/new-tenable-nessus-agent-collection/7021 "2024-07-04T14:14:15Z")
Hi there! I guess this is the main Ansible Forum haha (or at least this is where I’ve asked some questions on the past) After some time internally developing, working and using it , I have decided to publish a collectio… --- ## [Is it safe to use Ansible to run playbooks on untrusted hosts?](https://forum.ansible.com/t/is-it-safe-to-use-ansible-to-run-playbooks-on-untrusted-hosts/4043)
**Author:** [@AlexA](https://forum.ansible.com/u/AlexA)\ **Replies:** 1\ **Last updated:** [February 25, 2024, 3:58pm UTC](https://forum.ansible.com/t/is-it-safe-to-use-ansible-to-run-playbooks-on-untrusted-hosts/4043 "2024-02-25T15:58:52Z")
Hi guys! I’m considering creating a simple service that helps users set up some software on servers. I’d like to use Ansible for this, but I’m not very familiar with Ansible. The plan is to load the inventory and SSH key… --- ## [Demo: Ansible Security Automation](https://forum.ansible.com/t/demo-ansible-security-automation/3673)
**Author:** [@IPvSean](https://forum.ansible.com/u/IPvSean)\ **Replies:** 0\ **Last updated:** [February 5, 2024, 3:01pm UTC](https://forum.ansible.com/t/demo-ansible-security-automation/3673 "2024-02-05T15:01:44Z")
Demo: Ansible Security Automation Aaron Quackenbush showcases a few common security automation use cases, leveraging Red Hat’s Ansible Automation Platform. Follow along with a SOC analyst as they configure logging in the…