The scan playbook

As already mentioned, we are going to be using Docker to run both WPScan and also OWASP ZAP. The reason for this is we would end up deploying quite a bit of supporting software if we were to install both packages directly on the host—while this is not a problem, using a tool such as Docker allows to simplify the installation process as well as giving us an excuse to cover the Docker Ansible modules.

The Docker role

As with all of the roles we have created so far, we are going to use the ansible-galaxy command to generate the structure for our role:

$ ansible-galaxy init roles/docker

For our Docker installation, we will be using the yum repository provided by Docker itself; this means that before we...