---
- hosts: "{{ HOSTS }}"
  become: yes
  vars:
    policy_name: all
  roles:
    - demo.satellite.scap_client

  tasks:
  - name: Randomized startup delay...
    pause: seconds="{{ 5 | random }}"

  - name: "Run SCAP Scan"
    shell: "/usr/bin/foreman_scap_client {{ item.id }}"
    loop: "{{ policy }}"
    when: policy_scan == 'all' or item.name in policy_scan